x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/737], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) ioctl$RTC_UIE_OFF(r0, 0x7004) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:48:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3c00}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3f00}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4800}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000000)={0xfffffdb5, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1f}, 0x7fd93d7748603736) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:48:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) [ 1478.744518] hid-generic 0000:0000:0000.0080: ignoring exceeding usage max [ 1478.794190] hid-generic 0000:0000:0000.0080: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1478.848257] hid-generic 0000:0000:0000.0081: ignoring exceeding usage max 16:48:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4c00}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1478.910081] hid-generic 0000:0000:0000.0081: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) splice(r0, &(0x7f0000000000)=0x2, r0, &(0x7f0000000240)=0x2, 0x1, 0x1) 16:48:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) 16:48:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x6000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) [ 1479.120455] hid-generic 0000:0000:0000.0082: ignoring exceeding usage max [ 1479.156791] hid-generic 0000:0000:0000.0082: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x6100}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1479.268238] hid-generic 0000:0000:0000.0083: ignoring exceeding usage max [ 1479.338505] hid-generic 0000:0000:0000.0083: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000000)={0x80, 0x1, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$UHID_DESTROY(r5, &(0x7f0000000280), 0x4) [ 1479.556514] hid-generic 0000:0000:0000.0084: ignoring exceeding usage max [ 1479.596763] hid-generic 0000:0000:0000.0084: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x6300}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:40 executing program 5: setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='security.SMACK64MMAP\x00', &(0x7f00000002c0)='/dev/uhid\x00', 0xa, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:48:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) [ 1479.820524] hid-generic 0000:0000:0000.0085: ignoring exceeding usage max [ 1479.864299] hid-generic 0000:0000:0000.0085: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:40 executing program 5: sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1479.961887] hid-generic 0000:0000:0000.0086: ignoring exceeding usage max [ 1479.983268] hid-generic 0000:0000:0000.0086: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1480.054593] hid-generic 0000:0000:0000.0087: ignoring exceeding usage max 16:48:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) [ 1480.095724] hid-generic 0000:0000:0000.0087: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x6800}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xe803) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x6900}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() r2 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='g', 0x524, 0xfffffffffffffffb) keyctl$revoke(0x3, r2) r3 = add_key(&(0x7f00000009c0)='trusted\x00', &(0x7f0000000a00)={'syz', 0x2}, &(0x7f0000000a40)="c1d4efac96530280d2a3637010d355bb93c7f5d454a7587d838ce1f6e1388b24b5a7ffd968fd0f9635f6e0810b35382b92143ebb7fa4227c7318c544490efb3b275d976722e2660e3f8926ca89165d24db3fa4df8c6f4d76700ebe4cf757edbb8be7e1f903bf5bff6292b78eee79628290da6a7140fe6df0cf9a2b2b0929dd0ddccbf2aa503fc0c3078052e62c0c446af8a7884ca5496cb90f45db61596da2b4c3f84d7bed3025d7f1191fcbd4df890d60c0c70e6da4bdcade9b6c414feab71169ce445677f12885ddd5d244a0f9d6f72b2dcb4ee3", 0xd5, r2) keyctl$describe(0x6, r3, &(0x7f0000000b40)=""/16, 0x10) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000840)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0xffffffff80000000, 0x3, &(0x7f00000007c0)=[{&(0x7f00000002c0)="30c13f03cd92c12d1d7506a5082bf093762dc26f3ffc0611034bd998dcc7cd657368366d0bab89cc57351499236024a893fed85b146c4aee530f19a6253dc14dd40790b1838a6d094f856bcbd8ff4fe1c0deacc317a12a39ac4c30b7807410bebb", 0x61, 0x8}, {&(0x7f00000005c0)="a55ef50d766e2026fcae889ac916fef152fb0d2a818bc28438c10a04acf540785463fd169f4c113cb52f23b66108871526c379e1bda85864f263b7f5699ef99c716fafb9dfd6ef68ecaa5b821c6a6cba69a355c2118aa623e26bc89f236ce84a951226d11f5de6e36116ee3928d842c21e55a9c9bead1cc0cb6837ff815f4b15a3d8be085150cff544ccf0e8bc7879f415494d7d2da585effa3038bb3430eea9ba1265db8d0ee72ec58973dc41236efdecb8a3fb3f3b6e915b8504426e79ad00c4561e8b61358358199efb33c13d0091a0eb4b948385c77c2e66a44049f077b2e82a1e0c3aa0628d68e76ef4ef71f4cc44872dc5438b94", 0xf7}, {&(0x7f00000006c0)="d28c895591ddfb40ae2e02abe267f6a0c80522147d416269425b15d49af14c2bb1db0e14a9a8c4b8ea8c235a3958934f39933cefd5c483daf59ea54a59036fc4c4fe124041ffe40f9215e9fbdf3ce27dea62e5abfe757b19c9c7e5580e54145e2063abdd4983c61e4719043b8c8c787d0a1e49ce851a477611dbaa3889975c54beb5ad3e512d8c90a2c696b37bdb775850172e1a2d73654caeab29ad392007e469e926e8110f1342e4c40f045f7116cd4bca30a5c97085ad4ee7eacc67dab07ce6f197b12501387ebbda0c8e", 0xcc, 0x100}], 0x5000, &(0x7f0000000940)={[{@nonumtail='nnonumtail=1'}, {@shortname_win95='shortname=win95'}, {@nonumtail='nnonumtail=1'}, {@shortname_lower='shortname=lower'}, {@shortname_lower='shortname=lower'}, {@shortname_win95='shortname=win95'}], [{@dont_hash='dont_hash'}, {@euid_eq={'euid', 0x3d, r6}}]}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1480.574903] hid-generic 0000:0000:0000.0088: ignoring exceeding usage max [ 1480.647419] hid-generic 0000:0000:0000.0088: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x6c00}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1480.819935] hid-generic 0000:0000:0000.0089: ignoring exceeding usage max [ 1480.928988] hid-generic 0000:0000:0000.0089: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) 16:48:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xf401) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x7100}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x7300}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe3461"], 0x12e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/464]) fstat(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$alg(0x26, 0x5, 0x0) fstat(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r8) getgroups(0x4, &(0x7f00000001c0)=[0xee01, 0x0, 0x0, r8]) r9 = socket$alg(0x26, 0x5, 0x0) fstat(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r10) getgroups(0x4, &(0x7f00000001c0)=[0xee01, 0x0, 0x0, r10]) r13 = socket$alg(0x26, 0x5, 0x0) fstat(r13, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r14) getgroups(0x4, &(0x7f00000001c0)=[0xee01, 0x0, 0x0, r14]) r15 = socket$alg(0x26, 0x5, 0x0) fstat(r15, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r16) getgroups(0x4, &(0x7f00000001c0)=[0xee01, 0x0, 0x0, r16]) r17 = socket$alg(0x26, 0x5, 0x0) fstat(r17, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r18) getgroups(0x4, &(0x7f00000001c0)=[0xee01, 0x0, 0x0, r18]) getgroups(0x3, &(0x7f0000000240)=[r8, 0x0, r18]) r20 = socket$alg(0x26, 0x5, 0x0) fstat(r20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r21) getgroups(0x4, &(0x7f00000001c0)=[0xee01, 0x0, 0x0, r21]) getgroups(0x9, &(0x7f0000000300)=[r8, r10, r14, r11, r12, 0xee01, r16, r19, r21]) ioctl$TUNSETGROUP(r3, 0x400454ce, r6) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1481.791805] hid-generic 0000:0000:0000.008A: ignoring exceeding usage max 16:48:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1481.870616] hid-generic 0000:0000:0000.008A: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xff03) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) [ 1481.989681] hid-generic 0000:0000:0000.008B: ignoring exceeding usage max [ 1482.048408] hid-generic 0000:0000:0000.008B: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x8, 0x40002) write$UHID_DESTROY(r0, &(0x7f0000000000), 0xfffffffffffffe2f) 16:48:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x7400}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) [ 1482.201672] hid-generic 0000:0000:0000.008C: ignoring exceeding usage max [ 1482.249009] hid-generic 0000:0000:0000.008C: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) 16:48:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x7501}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x7900}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1482.983452] hid-generic 0000:0000:0000.008D: ignoring exceeding usage max [ 1482.992578] hid-generic 0000:0000:0000.008D: hidraw1: HID v0.00 Device [syz1] on sz1 16:48:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000000)) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:48:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x7a00}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x40000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) 16:48:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xff00}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x18) 16:48:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x40000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8, 0x0, 0x2, 0xffffffffffffffff}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b40)={0x0, 0x0}, &(0x7f0000000b80)=0xc) r3 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000bc0)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000cc0)=0xe8) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000240)='./file0\x00', 0x7fffffff, 0xa, &(0x7f0000000a40)=[{&(0x7f00000002c0), 0x0, 0x4}, {&(0x7f0000000300)="44ac33bc15b1810aa839be6d75d0184dc3d4bd1043239fc6edc085fd0af5fa4485f9ed05a9013095cc984f67e7df2bd61dd445135273b591b8a5ab303b44dea685fbb01088ff237377e2c1afb8645aa08e83c1b1eccabe149b2ca198cf923545873b", 0x62, 0x1}, {&(0x7f00000005c0)="5192862efd352e9b9467adf7489441abd1566b41b3e871b8713568294e192e7abed2686908efd4490fe8724795305fd573f7b237d72b2cf23b4b735ac8", 0x3d}, {&(0x7f0000000600)="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", 0xfa, 0x7}, {&(0x7f0000000700)="93793eaec44f3098eae4c9316aa1f4f4852bcfb67ac73efa6acea756050dd8e31d4e5b7c27b23f7ffa9dcc12db4810815b18f6b25b628ba86eb99a65f08bb87de512fcefdc173231324593a554e1e96fd0718e62254ef4e46fb9", 0x5a, 0x5}, {&(0x7f0000000780)="8fa4c466828fbd28a701c6f6fb60fc6539ec937aae606e158d385f6368338a1b55da578143a6916e010c9b81797134f1c5f0cd361c2c9b47136528643726268ddfeeaf8e8fa20e9002dc1a43ed48a0564d426daa139a36b55041e05c1ab52d66a1e6dd315e6932f6416fa0cfba4393f2fed350ced3744c", 0x77}, {&(0x7f0000000800), 0x0, 0x7}, {&(0x7f0000000840)="5533dd3e", 0x4, 0x5}, {&(0x7f0000000880)="5f4fb138bc5dc4ab1b5f3ffef77a896e6bcc8ef663a3838391dc1f617f0dc79f1ab4cd842fcdbce928365bb8989f2a2220c037647110d23c15a0fec146c1c154d6c091e4510158ae745c9e7a4450ff56a427de24a3f7bc07432c91172863e3aad74e486236dfd79e7736c02c4ff420373fbe082438d881619ad2ecdbb1d63d3a8e475f3d", 0x84, 0xffffffff}, {&(0x7f0000000940)="eabff775130e22aae4f7b6458397acaa9e6a1da7fa2a038dd286d1ea93d799caa64d832293f6af55aebc262e59b1bbe928144b360cfc092cf255448561bdcd6dd4c05669b87bb8d78f68dbaeb8bb1b5dfd1150ff295914a6c801cff81f24241b7b341f15433d2a79c91488ef005a7528f83dd7ecbe842d033fa02b2ae57cb71d7e622fbe4c4e9aed6805cdcc0a04231310589b8d8ce7d48a93f7329e638c6cf92d86a102e3de41a035763872f48c6db53d29685fe47219e2bd957191b8ee137b249b1555fff4ee8589a5d52bc39ab4a9122d4823ea9eb7e912", 0xd9, 0x80}], 0x1000020, &(0x7f0000000d00)={[{@background_gc_on='background_gc=on'}, {@lfs_mode='mode=lfs'}, {@prjquota={'prjquota'}}, {@alloc_mode_reuse='alloc_mode=reuse'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}, {@noheap='noheap'}, {@whint_mode_fs='whint_mode=fs-based'}, {@grpquota={'grpquota'}}, {@lazytime='lazytime'}], [{@obj_role={'obj_role'}}, {@fsuuid={'fsuuid', 0x3d, {[0x2, 0x3596f970ed47400c, 0x30, 0x34, 0x61, 0x35, 0x35, 0x33], 0x2d, [0x35, 0x61, 0x35, 0x34], 0x2d, [0x32, 0x72, 0x65, 0x33], 0x2d, [0x35, 0x65, 0x9fadb5196f6c31f1, 0x64], 0x2d, [0x32, 0x39, 0x38, 0x1a, 0x63, 0x0, 0x35, 0xadd9c6d4d58da38c]}}}, {@fowner_gt={'fowner>', r2}}, {@euid_gt={'euid>', r4}}, {@smackfstransmute={'smackfstransmute'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@dont_appraise='dont_appraise'}, {@uid_gt={'uid>', r5}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x7ff}}]}) [ 1484.007316] hid-generic 0000:0000:0000.008E: ignoring exceeding usage max [ 1484.045234] hid-generic 0000:0000:0000.008E: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e900000000000000000020000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad1b5e938a868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe34610000000000"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1484.084473] hid-generic 0000:0000:0000.008F: ignoring exceeding usage max [ 1484.107077] hid-generic 0000:0000:0000.008F: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5ca1d}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x97615}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x5000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x100000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) sched_setattr(r2, &(0x7f0000000240)={0xffffffffffffff6d, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20000000000000}, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x12e) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r3, &(0x7f0000000280), 0xfed0) 16:48:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x200000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1485.129339] hid-generic 0000:0000:0000.0090: ignoring exceeding usage max [ 1485.164920] hid-generic 0000:0000:0000.0090: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) [ 1485.253334] hid-generic 0000:0000:0000.0091: ignoring exceeding usage max [ 1485.304736] hid-generic 0000:0000:0000.0091: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x2f0, 0x2, 0xc5805b6649befa44, 0x0, 0x8, 0x7, 0x8000, 0x7f}, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7f9, 0x20180) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r1, &(0x7f0000000280), 0xfed0) 16:48:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x400000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1485.516934] hid-generic 0000:0000:0000.0092: ignoring exceeding usage max 16:48:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) [ 1485.557563] hid-generic 0000:0000:0000.0092: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1485.623722] hid-generic 0000:0000:0000.0093: ignoring exceeding usage max [ 1485.688756] hid-generic 0000:0000:0000.0093: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x7000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e23, @broadcast}}) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:48:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x6b6b6b}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1485.995759] hid-generic 0000:0000:0000.0094: ignoring exceeding usage max [ 1486.018255] hid-generic 0000:0000:0000.0094: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1486.056266] hid-generic 0000:0000:0000.0095: ignoring exceeding usage max [ 1486.075136] hid-generic 0000:0000:0000.0095: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_GET_MSR_INDEX_LIST(r5, 0xc004ae02, &(0x7f0000000240)=ANY=[@ANYBLOB="fc0aa213401f1da93d0700000020000000ffffff00000000000000"]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:48:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8000a0}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8001a0}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xa000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x80ffff}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x1ff, 0x5, 0x2, 0x0, 0x7}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x2) close(r3) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x2) close(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r8, 0x400455c8, 0x2) close(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mISDNtimer\x00', 0x8000, 0x0) dup2(r9, r10) write$UHID_CREATE2(r0, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC=r9, @ANYRESDEC=r5, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES16=r8, @ANYRESHEX], @ANYRES32=r7], @ANYPTR64], 0x5) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup2(r11, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) getsockopt$netrom_NETROM_N2(r12, 0x103, 0x3, &(0x7f00000002c0)=0x80000000, &(0x7f0000000300)=0x4) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:48:47 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:48 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:48 executing program 0: r0 = socket$kcm(0x2, 0x0, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xe000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:48 executing program 0: r0 = socket$kcm(0x2, 0x0, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x3, 0x1, 0x0, 0x9, 0x0, 0x0, 0x3}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:48:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1488.179298] hid-generic 0000:0000:0000.0096: ignoring exceeding usage max 16:48:48 executing program 0: r0 = socket$kcm(0x2, 0x0, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) [ 1488.242052] hid-generic 0000:0000:0000.0096: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) [ 1488.381234] hid-generic 0000:0000:0000.0097: ignoring exceeding usage max 16:48:49 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1488.454298] hid-generic 0000:0000:0000.0097: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1488.590088] hid-generic 0000:0000:0000.0098: ignoring exceeding usage max [ 1488.638574] hid-generic 0000:0000:0000.0098: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1488.729394] hid-generic 0000:0000:0000.0099: ignoring exceeding usage max 16:48:49 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) [ 1488.798976] hid-generic 0000:0000:0000.0099: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:48:49 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x18000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x6000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1488.992468] hid-generic 0000:0000:0000.009A: ignoring exceeding usage max [ 1489.025837] hid-generic 0000:0000:0000.009A: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:49 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) [ 1489.119943] hid-generic 0000:0000:0000.009B: ignoring exceeding usage max [ 1489.186389] hid-generic 0000:0000:0000.009B: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) getpid() write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:48:50 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) [ 1489.350774] hid-generic 0000:0000:0000.009C: ignoring exceeding usage max [ 1489.411832] hid-generic 0000:0000:0000.009C: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x7000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:50 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) [ 1489.499625] hid-generic 0000:0000:0000.009D: ignoring exceeding usage max [ 1489.521666] hid-generic 0000:0000:0000.009D: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:50 executing program 5: prlimit64(0x0, 0x4, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x80f84930b49fb0a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000240)=0xd, 0x4) r3 = semget$private(0x0, 0x4, 0x8) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000500)=""/32) write$UHID_CREATE2(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:48:50 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xa000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:50 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x3f000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xf000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:50 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) 16:48:50 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, 0x0, 0x0) 16:48:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x10000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:51 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, 0x0, 0x0) 16:48:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x40000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x15760900}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x20000) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000000c0)=0x8) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r1, &(0x7f00000005c0)=ANY=[], 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) prctl$PR_GET_DUMPABLE(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000440)=""/252}, {&(0x7f0000000540)=""/23}], 0x1000000000000042) syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x0, 0x2) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x80000, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000280), 0xfed0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8) ioctl$USBDEVFS_DISCARDURB(r6, 0x550b, &(0x7f0000000000)=0x7) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r5) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000300}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x0, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x410) 16:48:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000000)={0x4e, 0x4}) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:48:51 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, 0x0, 0x0) 16:48:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x18000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1490.928866] hid-generic 0000:0000:0000.009E: ignoring exceeding usage max [ 1490.953182] hid-generic 0000:0000:0000.009E: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000240)=0x200, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r2, &(0x7f0000000280), 0xfed0) r4 = msgget(0x0, 0x0) msgctl$MSG_INFO(r4, 0xc, &(0x7f00000002c0)=""/186) io_setup(0x7, &(0x7f0000000000)) [ 1490.991348] hid-generic 0000:0000:0000.009F: ignoring exceeding usage max [ 1491.030245] hid-generic 0000:0000:0000.009F: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:51 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) [ 1491.151071] hid-generic 0000:0000:0000.00A0: ignoring exceeding usage max [ 1491.185320] hid-generic 0000:0000:0000.00A0: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x18100000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x60000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) [ 1491.282138] hid-generic 0000:0000:0000.00A1: ignoring exceeding usage max 16:48:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) [ 1491.352187] hid-generic 0000:0000:0000.00A1: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xa000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1dca0500}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_CREATE2(r3, &(0x7f0000000380)=ANY=[], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000000)={0xed9d, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$MON_IOCQ_RING_SIZE(r5, 0x9205) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:48:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:48:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xff03) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x32000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xa0020000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3c000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xe8030000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe3461"], 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x86000, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) r3 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0xffffffffffffffff, 0x2000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80605414, &(0x7f00000002c0)=""/188) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:48:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x7501}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3f000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xeffdffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xf4010000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x40000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xff030000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x48000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x2) close(r2) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) recvfrom$inet6(r3, &(0x7f00000002c0)=""/173, 0xad, 0x4002, &(0x7f0000000240)={0xa, 0x4e24, 0x1, @local, 0x4}, 0x1c) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000000)={0x0, 0x7fffffff, 0x6}) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:48:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4c000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1493.541881] hid-generic 0000:0000:0000.00A2: ignoring exceeding usage max [ 1493.563273] hid-generic 0000:0000:0000.00A2: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xfffffdef) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) [ 1493.657102] hid-generic 0000:0000:0000.00A3: ignoring exceeding usage max [ 1493.687454] hid-generic 0000:0000:0000.00A3: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/624], 0x12e) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=""/2, &(0x7f0000000240)=0x2) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:48:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xffffff7f) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) [ 1493.864192] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x3 [ 1493.896613] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0 16:48:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x61000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1493.929576] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0 [ 1493.967388] hid-generic 0000:0000:0000.00A4: unknown main item tag 0xe 16:48:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1493.996746] hid-generic 0000:0000:0000.00A4: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x2a0ffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) [ 1494.093113] hid-generic 0000:0000:0000.00A5: ignoring exceeding usage max [ 1494.112365] hid-generic 0000:0000:0000.00A5: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) [ 1494.164190] hid-generic 0000:0000:0000.00A6: ignoring exceeding usage max 16:48:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x63000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$bt_l2cap(r3, &(0x7f0000000000), &(0x7f0000000240)=0xe, 0x0) [ 1494.232294] hid-generic 0000:0000:0000.00A6: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:54 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x2) close(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r6, 0x400455c8, 0x1) close(r6) write$UHID_CREATE2(r2, &(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="ef711c20de253c187584d9cae5d59aa137365446eae38eee4cbdbb2aa085d478347d79dd1f13779e6f3084753b30b02866370d7d1a0a3fbef1046d2262affb5e2ae6761c0028fe3c271ddc204875bbc813d6245e7d24a4cf", @ANYRESDEC=r4, @ANYRESHEX, @ANYBLOB="095b57ae2b23569e651004dd97bb7bb68de1c80ae41d1f755bb85fdfcae97807203d5d8b3c7e42cdfd2df085187d300c286cd6ceb03369ed30b9d500"/70, @ANYPTR64, @ANYBLOB="10acc5e8c17a14f2cf607c72dad8a2a402748173d0443d70e76ae09130adc42e35ed01416c3263af8a5ea23aa1d1b7e43c18a207b251b50cfa3042d4814f2690340b45ccfb14f1043a61df1d1d33be5b9c7cdf3d7d08a2533190e4722070361148d8aced497e3705d7fdb12208f9fcdb4902bb974670586c48b52de5f63fc208b523ae729f714123d2ed1cd1c02a921bc586c6f48883f45f57241d5571504c234d9ca7dd56228b6c0b63a3461c11b400dd74bc7a95bd95d98d63bf6556b05073a1ef6f", @ANYRES64=r5, @ANYRES32=r6, @ANYRESOCT=r4]], 0x1) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x200000, 0x0) getsockopt$inet6_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000780)=""/139, &(0x7f0000000500)=0x8b) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2a4) write$UHID_DESTROY(r2, &(0x7f0000000280), 0xfed0) [ 1494.316173] hid-generic 0000:0000:0000.00A7: ignoring exceeding usage max 16:48:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x4000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) [ 1494.382922] hid-generic 0000:0000:0000.00A7: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1494.435081] hid-generic 0000:0000:0000.00A8: ignoring exceeding usage max [ 1494.469700] hid-generic 0000:0000:0000.00A8: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() syz_emit_ethernet(0x1542, &(0x7f00000005c0)={@remote, @link_local, [{[], {0x8100, 0x3, 0x0, 0x2}}], {@ipv6={0x86dd, {0x2, 0x6, "3ed47a", 0x1508, 0x73, 0xfe, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@dstopts={0x2c, 0x20e, [], [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x58, {0x16, 0x14, 0xc8, 0xfcab, [0x1a3f6447, 0x8, 0x3f, 0x40, 0xfffffffffffffffb, 0x7014ebb9, 0x8, 0x8d0, 0x1, 0x1000]}}, @generic={0x2, 0x1000, "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"}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x89, 0xe, 0x6d3b017f293a5a60, 0x9, 0x0, [@empty, @remote, @loopback, @local, @dev={0xfe, 0x80, [], 0xf}, @mcast1, @dev={0xfe, 0x80, [], 0x1f}]}, @routing={0xcc, 0x4, 0x2, 0x5, 0x0, [@empty, @empty]}, @srh={0x26d176c6556cec69, 0xc, 0x4, 0x6, 0xe0, 0x40, 0x3, [@remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, @loopback, @rand_addr="a06c8fab78adb9d98f54e189710f28ab", @initdev={0xfe, 0x88, [], 0x0, 0x0}]}, @dstopts={0x3b, 0x53, [], [@jumbo={0xc2, 0x4, 0x6}, @generic={0x9, 0x88, "9d597a9be1d67d014159320a4dc03a252e1951521e86705a864d435bf60ffc677bf9050241c3bb223d04a08c4e8522b92396fec444fbbf0846d1bfd1dc901d825d1bbe6a2dad9d212fe52597168be2be0a45aebdc25c16f37cb77051470f31f4b01327ee01e923a27b46beba2b0f029e7b32b49089342c849fef7be2f2bda4cefe69a5ca8d114271"}, @pad1, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x30, {0x2, 0xa, 0x1, 0x5, [0x6, 0x9, 0x1ff, 0x2, 0x80000001]}}, @generic={0x8, 0xb2, "59393de331f0eedc4bde2195a8711ed93994720cedfe4ab310175912dae21b1e767caafc25cc155bbaec448bda18b32f7b4beb8f2866b261e5211ea91bfa62a4c5f8cff0c4c0a09aeea70f9303bdb46b7ea5beb709c291b7371b3fb232ac6281b6838525a9ed6d6e561b884e25fb944da79e7a3e7321fe01e2b21ef184ff30decac6a63ffc9f396bdfcb836d75aa2fa405e4731f073395470953d324c627cdb27e83acc848d54f27f60ab6effc4d00be06de"}, @hao={0xc9, 0x10, @ipv4={[], [], @empty}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x1, 0xf8, "2321717669995c7f49b6cd3b3bc184e80ef82793716ff851f3c29f145bb2e4f948469e2d422d4ba6875b322f561b972be1057986a6503d728c659b7e7b73b39e559a3642c9029619f5d90726a258a6a25eefdda56b361c698384f8c1663cf1c8684c994c1678544dfcd8853252a0a1f811db0e044d70a2fff04653767789de99b1d10b448af7d9235476722a9769bbeec5e536957b771f9f39c8d5088653b5c56d2353d5a6334866b3c56b8e6d438db864207febe5141b5b1af68718f99ea84e2636f25bc8e53127adbe0617f85fc2e8f51edc821517f4e2629191dff2229792bcb3387f8e56bb32a083eeb4fb44280f0cb18df98983fb7e"}, @pad1]}, @routing={0x29, 0xa, 0x1, 0x9, 0x0, [@rand_addr="8b537f15487a1236facacabacdca0423", @empty, @loopback, @initdev={0xfe, 0x88, [], 0x6, 0x0}, @mcast2]}], @dccp={{0x4e23, 0x4e21, 0x4, 0x1, 0x5, 0x0, 0x0, 0xd, 0x0, "d2e7a4", 0x1, "7137fa"}, "707e4c32c0132b2ec8aaefcea655071c3a06ad630e94bd59a423ff1c142703c9688669546b7d5b5d7d7aa52cef59e03041d4f0e6587e0dd74671886104350e1ca5b7fa70d5485e826230accd239912c51ac27a461649cb6722115b0488e1c40ea142b6b1e28a7225949ca78e15377a6b"}}}}}}, 0x0) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe3461"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) [ 1494.594555] hid-generic 0000:0000:0000.00A9: ignoring exceeding usage max [ 1494.619080] hid-generic 0000:0000:0000.00A9: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x68000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:55 executing program 5: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f00000005c0)=""/230) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8009, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001800)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r1, &(0x7f0000000280), 0xfed0) [ 1494.683960] hid-generic 0000:0000:0000.00AA: ignoring exceeding usage max [ 1494.703196] hid-generic 0000:0000:0000.00AA: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1494.801302] hid-generic 0000:0000:0000.00AB: ignoring exceeding usage max [ 1494.850702] hid-generic 0000:0000:0000.00AB: hidraw0: HID v0.00 Device [syz1] on sz1 16:48:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x4100, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xffffffffffffff81) 16:48:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x69000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x100000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:48:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:48:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x6b6b6b00}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x6c000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:48:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x71000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1496.597713] Bluetooth: hci0: command 0x1003 tx timeout [ 1496.603118] Bluetooth: hci0: sending frame failed (-49) [ 1498.667891] Bluetooth: hci0: command 0x1001 tx timeout [ 1498.673353] Bluetooth: hci0: sending frame failed (-49) [ 1500.747782] Bluetooth: hci0: command 0x1009 tx timeout 16:49:05 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x2) close(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r6, 0x400455c8, 0x1) close(r6) write$UHID_CREATE2(r2, &(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="ef711c20de253c187584d9cae5d59aa137365446eae38eee4cbdbb2aa085d478347d79dd1f13779e6f3084753b30b02866370d7d1a0a3fbef1046d2262affb5e2ae6761c0028fe3c271ddc204875bbc813d6245e7d24a4cf", @ANYRESDEC=r4, @ANYRESHEX, @ANYBLOB="095b57ae2b23569e651004dd97bb7bb68de1c80ae41d1f755bb85fdfcae97807203d5d8b3c7e42cdfd2df085187d300c286cd6ceb03369ed30b9d500"/70, @ANYPTR64, @ANYBLOB="10acc5e8c17a14f2cf607c72dad8a2a402748173d0443d70e76ae09130adc42e35ed01416c3263af8a5ea23aa1d1b7e43c18a207b251b50cfa3042d4814f2690340b45ccfb14f1043a61df1d1d33be5b9c7cdf3d7d08a2533190e4722070361148d8aced497e3705d7fdb12208f9fcdb4902bb974670586c48b52de5f63fc208b523ae729f714123d2ed1cd1c02a921bc586c6f48883f45f57241d5571504c234d9ca7dd56228b6c0b63a3461c11b400dd74bc7a95bd95d98d63bf6556b05073a1ef6f", @ANYRES64=r5, @ANYRES32=r6, @ANYRESOCT=r4]], 0x1) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x200000, 0x0) getsockopt$inet6_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000780)=""/139, &(0x7f0000000500)=0x8b) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2a4) write$UHID_DESTROY(r2, &(0x7f0000000280), 0xfed0) 16:49:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x12e) r2 = semget(0x2, 0xbf94ac1ca3a8776a, 0x5) semctl$GETZCNT(r2, 0x2, 0xf, &(0x7f00000005c0)=""/197) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) getrandom(&(0x7f00000002c0)=""/103, 0x67, 0x2) 16:49:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x500000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:49:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:49:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x73000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:49:05 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xd, r3, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x2}) getsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f00000002c0)=""/183, &(0x7f0000000180)=0xb7) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000100)={r7}) fcntl$setstatus(r4, 0x4, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r8, 0x400455c8, 0x2) close(r8) ioctl$TIOCSIG(r8, 0x40045436, 0x28) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) bind$bt_hci(r4, &(0x7f0000000200)={0x1f, r9, 0x3}, 0xc) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000080)=r9) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) [ 1504.654930] hid-generic 0000:2000000:0000.00AC: ignoring exceeding usage max [ 1504.676539] hid-generic 0000:2000000:0000.00AC: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1504.710701] hid-generic 0000:2000000:0000.00AD: ignoring exceeding usage max [ 1504.737915] hid-generic 0000:2000000:0000.00AD: hidraw0: HID v0.00 Device [syz1] on sz1 16:49:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x401, 0x2, 0x8, 0x9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r2, &(0x7f0000000280), 0xfed0) 16:49:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:49:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x74000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:49:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69200000}, [@exit]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x359, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffee, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 1504.904083] hid-generic 0000:0000:0000.00AE: ignoring exceeding usage max [ 1504.972471] hid-generic 0000:0000:0000.00AE: hidraw0: HID v0.00 Device [syz1] on sz1 16:49:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) [ 1505.034002] hid-generic 0000:0000:0000.00AF: ignoring exceeding usage max 16:49:05 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x98, 0x2, 0x200, r0, 0x9, [], 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) [ 1505.086582] hid-generic 0000:0000:0000.00AF: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1506.827869] Bluetooth: hci0: command 0x1003 tx timeout [ 1506.834701] Bluetooth: hci0: sending frame failed (-49) [ 1508.907809] Bluetooth: hci0: command 0x1001 tx timeout [ 1508.913233] Bluetooth: hci0: sending frame failed (-49) [ 1510.987891] Bluetooth: hci0: command 0x1009 tx timeout 16:49:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x75010000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:49:15 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x2) close(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r6, 0x400455c8, 0x1) close(r6) write$UHID_CREATE2(r2, &(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="ef711c20de253c187584d9cae5d59aa137365446eae38eee4cbdbb2aa085d478347d79dd1f13779e6f3084753b30b02866370d7d1a0a3fbef1046d2262affb5e2ae6761c0028fe3c271ddc204875bbc813d6245e7d24a4cf", @ANYRESDEC=r4, @ANYRESHEX, @ANYBLOB="095b57ae2b23569e651004dd97bb7bb68de1c80ae41d1f755bb85fdfcae97807203d5d8b3c7e42cdfd2df085187d300c286cd6ceb03369ed30b9d500"/70, @ANYPTR64, @ANYBLOB="10acc5e8c17a14f2cf607c72dad8a2a402748173d0443d70e76ae09130adc42e35ed01416c3263af8a5ea23aa1d1b7e43c18a207b251b50cfa3042d4814f2690340b45ccfb14f1043a61df1d1d33be5b9c7cdf3d7d08a2533190e4722070361148d8aced497e3705d7fdb12208f9fcdb4902bb974670586c48b52de5f63fc208b523ae729f714123d2ed1cd1c02a921bc586c6f48883f45f57241d5571504c234d9ca7dd56228b6c0b63a3461c11b400dd74bc7a95bd95d98d63bf6556b05073a1ef6f", @ANYRES64=r5, @ANYRES32=r6, @ANYRESOCT=r4]], 0x1) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x200000, 0x0) getsockopt$inet6_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000780)=""/139, &(0x7f0000000500)=0x8b) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2a4) write$UHID_DESTROY(r2, &(0x7f0000000280), 0xfed0) 16:49:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:49:15 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000006918100000", @ANYRES32=r0, @ANYBLOB="000000000000000095000000000000000012e0953ab943d2674af8d704fc1484ba830b742d6a28c50803c048e360a2f55d558ceb4148e4cc52e12e77bec17ae17f6804e2c2c321d40641249859b9a4b8c7f8cbd37d65559f827bd97491af57696442feb959de3042e3b3c0aa3f881de7739c449d2b77a7f8d5a7cf2407c922f91bcbbfe94c244d410240d89847b06d699a5043bd"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) 16:49:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:49:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x700000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) [ 1514.889390] hid-generic 0000:0000:0000.00B0: ignoring exceeding usage max [ 1514.948331] hid-generic 0000:0000:0000.00B0: hidraw0: HID v0.00 Device [syz1] on sz1 16:49:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x79000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:49:15 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) fcntl$setpipe(r0, 0x407, 0x1000100000) r1 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x400200) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000006918100000326fcadb0f1b17e0c631a769db6fe8713c7123c48500bee98a2e7960500f3fd29ff4af00007d1c6f866b5cd2c09e42501a90d8c4db9ddba022375aa5a5c255bc7355d7fc7749c72e66303e14c0c23eac161d735995dbfbfe75d274121a", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x80000001, 0x7f, 0x0, 0x57a8b12bad138c39, 0x17, 0x10, "cf15986303cd1b0e8bb9512d2c88ec52bca27442ad8bdd8fa1fe4b3477b7d89519eb015069e4148ce349f5c6a926b9d6e3fad4fd30e25a66f6482046853e3314", "c9ef8587adedaea916ba061adb2313b3f901b79ee7d04a74b831e2aff49de2b13d641a61e00e7bd43eda368388b320aecf1fd68fdd745fe0e25daf0a672bb708", "1435be4d0f5b6e5a81a36f6701cadf3ac0927bcfaa62953efbeca9d60c4484ce", [0x3, 0x4]}) r5 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000300)=""/233) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x10000, 0x0) write$FUSE_OPEN(r6, &(0x7f0000000180)={0x20, 0x0, 0x3, {0x0, 0x9}}, 0x20) 16:49:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) [ 1515.062087] hid-generic 0000:0000:0000.00B1: ignoring exceeding usage max [ 1515.108255] hid-generic 0000:0000:0000.00B1: hidraw0: HID v0.00 Device [syz1] on sz1 16:49:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x2) close(r2) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000380)=ANY=[], 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xc000000000, 0x80000) ioctl$TIOCLINUX3(r4, 0x541c, &(0x7f0000000240)) 16:49:15 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x4e21, @remote}}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) 16:49:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x7a000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1517.067787] Bluetooth: hci0: command 0x1003 tx timeout [ 1517.073176] Bluetooth: hci0: sending frame failed (-49) [ 1519.147799] Bluetooth: hci0: command 0x1001 tx timeout [ 1519.153195] Bluetooth: hci0: sending frame failed (-49) [ 1521.227813] Bluetooth: hci0: command 0x1009 tx timeout 16:49:25 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x2) close(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r6, 0x400455c8, 0x1) close(r6) write$UHID_CREATE2(r2, &(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="ef711c20de253c187584d9cae5d59aa137365446eae38eee4cbdbb2aa085d478347d79dd1f13779e6f3084753b30b02866370d7d1a0a3fbef1046d2262affb5e2ae6761c0028fe3c271ddc204875bbc813d6245e7d24a4cf", @ANYRESDEC=r4, @ANYRESHEX, @ANYBLOB="095b57ae2b23569e651004dd97bb7bb68de1c80ae41d1f755bb85fdfcae97807203d5d8b3c7e42cdfd2df085187d300c286cd6ceb03369ed30b9d500"/70, @ANYPTR64, @ANYBLOB="10acc5e8c17a14f2cf607c72dad8a2a402748173d0443d70e76ae09130adc42e35ed01416c3263af8a5ea23aa1d1b7e43c18a207b251b50cfa3042d4814f2690340b45ccfb14f1043a61df1d1d33be5b9c7cdf3d7d08a2533190e4722070361148d8aced497e3705d7fdb12208f9fcdb4902bb974670586c48b52de5f63fc208b523ae729f714123d2ed1cd1c02a921bc586c6f48883f45f57241d5571504c234d9ca7dd56228b6c0b63a3461c11b400dd74bc7a95bd95d98d63bf6556b05073a1ef6f", @ANYRES64=r5, @ANYRES32=r6, @ANYRESOCT=r4]], 0x1) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x200000, 0x0) getsockopt$inet6_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000780)=""/139, &(0x7f0000000500)=0x8b) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2a4) 16:49:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:49:25 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0x8c14ca84fd36e0fa, 0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) 16:49:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xa00000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:49:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x85ffffff}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:49:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0xfffffffffffffdde, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x40}, 0x53d9bfd864315645) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001dc0)={@loopback, @initdev, 0x0}, &(0x7f0000001e00)=0xc) bind$packet(r3, &(0x7f0000001e40)={0x11, 0x8, r4, 0x1, 0x1}, 0x14) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1525.133657] hid-generic 0000:0000:0000.00B2: ignoring exceeding usage max 16:49:25 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) setsockopt(r2, 0x7fffffff, 0x2, &(0x7f0000000480)="8973feae732e61eee5606f4cf82a65879d8c9c8b1ebc73c5ad6a8c6c3a699e82b5816be9f74e0294b0abed2cbb3c1add4aed74ffe5aca7d2eb1181e816a20fa65a7012775158bcbb41bee0626293248aa5d4e4623cd5d4b894e25174408b5362819515cadeb1e5c8ae2d4c45b29ec050e9aa4adb22264a6760ac500ff99f840a5d93a39eb5d57877dea116411bc739d2421553149b0e9f695121899b00a25bfa1b89ac6ee894b2e9324c7967e8aac3d1530c0c670429e3cc755cb80612f5677341", 0xc1) r3 = dup2(r1, r1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x0, 0xfc00, 0x6, 0x2, 0x836adae92f496a79}, 0x98) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x40000, 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000002c0)={0x4, 0xd000, 0xb3, 0x0, 0x8001}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, [0x2, 0x9, 0x2]}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) [ 1525.201959] hid-generic 0000:0000:0000.00B2: hidraw0: HID v0.00 Device [syz1] on sz1 16:49:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) [ 1525.301913] hid-generic 0000:0000:0000.00B3: ignoring exceeding usage max 16:49:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x9cffffff}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1525.348491] hid-generic 0000:0000:0000.00B3: hidraw0: HID v0.00 Device [syz1] on sz1 16:49:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000070000003a4ea803f49fcc8b697e4dd59589a8d370d34a950000002f65000e"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 16:49:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000180)=0x4) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000280), 0xfed0) 16:49:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x25, 0x7, 0xb45341ecdb205338, 0x0, 0x100, 0xee1, 0x0, 0xb9a1}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1525.642001] hid-generic 0000:0000:0000.00B4: ignoring exceeding usage max [ 1525.677140] hid-generic 0000:0000:0000.00B4: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1527.227803] Bluetooth: hci0: command 0x1003 tx timeout [ 1527.233239] Bluetooth: hci0: sending frame failed (-49) [ 1529.307995] Bluetooth: hci0: command 0x1001 tx timeout [ 1529.313390] Bluetooth: hci0: sending frame failed (-49) [ 1531.387921] Bluetooth: hci0: command 0x1009 tx timeout 16:49:35 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x2) close(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r6, 0x400455c8, 0x1) close(r6) write$UHID_CREATE2(r2, &(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="ef711c20de253c187584d9cae5d59aa137365446eae38eee4cbdbb2aa085d478347d79dd1f13779e6f3084753b30b02866370d7d1a0a3fbef1046d2262affb5e2ae6761c0028fe3c271ddc204875bbc813d6245e7d24a4cf", @ANYRESDEC=r4, @ANYRESHEX, @ANYBLOB="095b57ae2b23569e651004dd97bb7bb68de1c80ae41d1f755bb85fdfcae97807203d5d8b3c7e42cdfd2df085187d300c286cd6ceb03369ed30b9d500"/70, @ANYPTR64, @ANYBLOB="10acc5e8c17a14f2cf607c72dad8a2a402748173d0443d70e76ae09130adc42e35ed01416c3263af8a5ea23aa1d1b7e43c18a207b251b50cfa3042d4814f2690340b45ccfb14f1043a61df1d1d33be5b9c7cdf3d7d08a2533190e4722070361148d8aced497e3705d7fdb12208f9fcdb4902bb974670586c48b52de5f63fc208b523ae729f714123d2ed1cd1c02a921bc586c6f48883f45f57241d5571504c234d9ca7dd56228b6c0b63a3461c11b400dd74bc7a95bd95d98d63bf6556b05073a1ef6f", @ANYRES64=r5, @ANYRES32=r6, @ANYRESOCT=r4]], 0x1) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x200000, 0x0) getsockopt$inet6_dccp_buf(r7, 0x21, 0xd, &(0x7f0000000780)=""/139, &(0x7f0000000500)=0x8b) 16:49:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) 16:49:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x9fffffff}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:49:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xe00000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:49:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FICLONE(r4, 0x40049409, r0) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000300)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, 0x2, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r5 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe7f746027e6bcb34) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f0000000680)={'teql0\x00', 0x3, 0x7}) dup2(r6, r6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000240)=0xc) write$UHID_CREATE2(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000b300e500060000000e000000ea00000004000000af16f5f7b1b6f1dbc52713d06fa7b55ae077727b0e7bbd71441460bc1d013e366af9d3c6c5c30ea85cb107c4399364d125ea1fbb720816ab9c46dc3c582f056cfdfd37055b8e781762f8afbdd920cb8028358cab341cdd4a00a925d99212400cab290d68ca02c9b067f5e3e305cd426a1cf562c49e2da385042de1e3bbb46df5fcc8ba20ba63cc32fcbccf464fefb98fec9c3c1e7bdedf0d4dc1ac615d03b435d2f4deffa91000cc886f47763481845e209eabd451b323bb3e5d8edf7df4702fb55e5c2f9d463323b2fb40f8edb5f01f7f6388e2a13f3bfe2e7311913b7b897cd2138ced6b7314d8e8c32dd3eeb55f782311fec7c6b42098578176f45751fc709aea250af1a54c28a8e15a06c07e155d4f2bf88ffb2f92be51d259cd77bed7a50d3c339aee877a22a483751958eb9cc7213702702523b12664f655b8b7032f80e818bd4f4d38a64dd62f"], 0x1cb) r8 = getpgrp(r7) sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x1, 0x0, 0x5, 0x0, 0x2, 0x100}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/535], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) r9 = syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3ff, 0x1) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r9, 0x10f, 0x84, &(0x7f0000000600), &(0x7f0000000640)=0x4) 16:49:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:49:36 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) pipe2(&(0x7f0000000080), 0x84000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f, 0xc8a29635434f489d}}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000002c0)={0x16, 0x45, 0xfa00, {&(0x7f00000000c0), 0x1, 0xffffffffffffffff, 0x54, 0x0, @in={0x2, 0x4e23, @local}}}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) 16:49:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @bcast}, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}, 0x48) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x6494f5e15082bda0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_DESTROY(r3, &(0x7f0000000240), 0x6bae44bdf0a2eaa7) 16:49:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xa0008000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:49:36 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4, 0x0, 0x5c0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) prctl$PR_SET_ENDIAN(0x14, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/199, 0xc7) 16:49:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) 16:49:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xa0018000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1537.547945] Bluetooth: hci0: command 0x1003 tx timeout [ 1537.554531] Bluetooth: hci0: sending frame failed (-49) [ 1539.628032] Bluetooth: hci0: command 0x1001 tx timeout [ 1539.633432] Bluetooth: hci0: sending frame failed (-49) [ 1541.707925] Bluetooth: hci0: command 0x1009 tx timeout 16:49:46 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x2) close(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r6, 0x400455c8, 0x1) close(r6) write$UHID_CREATE2(r2, &(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="ef711c20de253c187584d9cae5d59aa137365446eae38eee4cbdbb2aa085d478347d79dd1f13779e6f3084753b30b02866370d7d1a0a3fbef1046d2262affb5e2ae6761c0028fe3c271ddc204875bbc813d6245e7d24a4cf", @ANYRESDEC=r4, @ANYRESHEX, @ANYBLOB="095b57ae2b23569e651004dd97bb7bb68de1c80ae41d1f755bb85fdfcae97807203d5d8b3c7e42cdfd2df085187d300c286cd6ceb03369ed30b9d500"/70, @ANYPTR64, @ANYBLOB="10acc5e8c17a14f2cf607c72dad8a2a402748173d0443d70e76ae09130adc42e35ed01416c3263af8a5ea23aa1d1b7e43c18a207b251b50cfa3042d4814f2690340b45ccfb14f1043a61df1d1d33be5b9c7cdf3d7d08a2533190e4722070361148d8aced497e3705d7fdb12208f9fcdb4902bb974670586c48b52de5f63fc208b523ae729f714123d2ed1cd1c02a921bc586c6f48883f45f57241d5571504c234d9ca7dd56228b6c0b63a3461c11b400dd74bc7a95bd95d98d63bf6556b05073a1ef6f", @ANYRES64=r5, @ANYRES32=r6, @ANYRESOCT=r4]], 0x1) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x200000, 0x0) 16:49:46 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={@remote, 0x0}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xf, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0xa}, 0x70) 16:49:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xa0020000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:49:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x1800000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:49:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:49:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[], 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x2) close(r4) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000380)='trusted.overlay.redirect\x00', &(0x7f00000003c0)='./file0\x00', 0x8, 0x1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r5, 0x920, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4180}, 0x4000) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:49:46 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000140)=""/191, 0xbf}, {&(0x7f00000002c0)=""/57, 0x39}, {&(0x7f0000000300)=""/82, 0x52}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000000600)=""/157, 0x9d}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x8, &(0x7f0000000740)=""/161, 0xa1}, 0x2) syz_open_dev$sndseq(&(0x7f0000001c00)='/dev/snd/seq\x00', 0x0, 0xcba30dc5846bd9ce) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000001c40)={0x20, 0xffffffffffffffda, 0x6, {0x59, 0x4, 0x84c8, 0x10001}}, 0x20) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000001c80)=0x6f3) write$sndseq(0xffffffffffffffff, &(0x7f0000001a80)=[{0x1f, 0x0, 0x0, 0x3f, @time, {0x80, 0x81}, {0x3, 0x80}, @raw8={"82cf94430f4c2debe79fef63"}}, {0x3, 0x6, 0x9, 0x5, @time={r2, r3+10000000}, {0xc0, 0x20}, {0x1c, 0x20}, @quote={{0x6, 0x2}, 0xd2c6}}, {0x4, 0x0, 0x2, 0x5, @time={r4, r5+10000000}, {0x1, 0x74}, {0x1f, 0x81}, @ext={0x7c, &(0x7f00000019c0)="13ffca48057261209092b70225ae5e30712ebdd054fba38f18697f384aa849b179b3067899660d5a36d7d53f31b5a3605e3fa04863146a643e7a7b49fe7aa0436ccee8494f92a719fc29bf50753492221547794104fc793cef9de5fba51f9cf2b061f8397c66a34000e95793443d94b483ae1bea6acd638bf55ba74f"}}, {0x8, 0x0, 0x40, 0x1, @tick=0x6, {0xd8}, {0x0, 0x2}, @result={0xac, 0x7}}, {0x57, 0x2, 0x1, 0x20, @time={0x77359400}, {0x2, 0x6}, {0x3f, 0x1f}, @result={0x7fff, 0x6}}, {0x7f, 0x2, 0xf9, 0xf0, @tick=0x6, {0x29, 0x19}, {0x6, 0x3}, @ext={0x38, &(0x7f0000000900)="372bc1fee71d258b9978b8267cfadab86da1ab0c8c21f5f73af437120a55b1c0ff0e28e715bc4603d595099a2f0e6a1a87508297ddaa9e9a"}}, {0xf1, 0x5, 0x20, 0x80, @tick=0x4, {0x4, 0xff}, {0x80, 0x81}, @connect={{0xe0, 0xe0}, {0x5, 0x3f}}}, {0x3f, 0x1, 0x6, 0xeb, @time, {0x2, 0x3}, {0x1f, 0x1}, @quote={{0x2, 0x6}, 0x400, &(0x7f0000001a40)={0x4, 0x0, 0x4, 0x1, @tick=0x400, {0x0, 0x81}, {0x0, 0x3}, @raw32={[0x3, 0x0, 0x100]}}}}], 0x180) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000800)=""/80, &(0x7f0000000400)=0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0xfffffffffffffced, &(0x7f0000000200)=""/144}, 0x48) r6 = syz_open_dev$vcsa(&(0x7f0000001cc0)='/dev/vcsa#\x00', 0x380, 0x10000) ioctl$VIDIOC_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000001d00)={0x0, @reserved}) prctl$PR_GET_KEEPCAPS(0x7) 16:49:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xe4ffffff}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:49:46 executing program 3: rt_sigpending(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000006918100000", @ANYRES32=r0, @ANYBLOB="0000000000000000016e2aff082d5be6"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffef9}, 0x48) 16:49:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xff000000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:49:46 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x90, &(0x7f0000000200)=""/144, 0x41000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 16:49:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x3f00000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) [ 1547.707799] Bluetooth: hci0: command 0x1003 tx timeout [ 1547.713224] Bluetooth: hci0: sending frame failed (-49) [ 1549.787817] Bluetooth: hci0: command 0x1001 tx timeout [ 1549.793218] Bluetooth: hci0: sending frame failed (-49) [ 1551.867785] Bluetooth: hci0: command 0x1009 tx timeout 16:49:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0xd819438a30d72743, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x101b02, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000000c0)={0xbf596a493b7d6236}) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_UIE_ON(r3, 0x7003) connect$inet6(0xffffffffffffffff, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @rand_addr="cd6cd44372a9572974f65414e16124db"}, 0xffffffffffffffd8) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000680)=0xfcbc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000004c0)={0x0, 0x5b, "71d6f2b26bbcac7cf83e0a2b98cfd2dc68f1e98205b685d5b0ce4e1a14d641bab5995c035b6da683dfa7f083283910627da571efd8611785a452bd369e368b0b6ddff4c9cce0c27249410b17df0ac12e07d6711e354ac5811edc30"}, &(0x7f0000000540)=0x63) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000006918100000", @ANYRESHEX=r7, @ANYBLOB="00f600000020000000"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xe85f}, 0x10}, 0x70) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$NBD_CLEAR_SOCK(r9, 0xab04) write$selinux_access(r0, &(0x7f0000000100)={'/usr/sbin/cupsd', 0x20, 'unconfined', 0x20, 0x718}, 0x30) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0xfff, 0xfc00, 0x200, 0x10001, 0x2, 0x1, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x20) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup2(r11, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup2(r13, r13) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400202) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r14, 0x84, 0xa, &(0x7f0000000580)={0xa, 0x0, 0xc200, 0x7, 0x6, 0x7, 0x0, 0x3, 0x0}, &(0x7f00000005c0)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r12, 0x84, 0x72, &(0x7f0000000600)={r15, 0x1}, 0xc) getsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f00000003c0), &(0x7f0000000480)=0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=r10, @ANYBLOB="090003009a2eac18bc07"], &(0x7f0000000380)=0xe) 16:49:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffff8000}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:49:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:49:56 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x2) close(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r6, 0x400455c8, 0x1) close(r6) write$UHID_CREATE2(r2, &(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="ef711c20de253c187584d9cae5d59aa137365446eae38eee4cbdbb2aa085d478347d79dd1f13779e6f3084753b30b02866370d7d1a0a3fbef1046d2262affb5e2ae6761c0028fe3c271ddc204875bbc813d6245e7d24a4cf", @ANYRESDEC=r4, @ANYRESHEX, @ANYBLOB="095b57ae2b23569e651004dd97bb7bb68de1c80ae41d1f755bb85fdfcae97807203d5d8b3c7e42cdfd2df085187d300c286cd6ceb03369ed30b9d500"/70, @ANYPTR64, @ANYBLOB="10acc5e8c17a14f2cf607c72dad8a2a402748173d0443d70e76ae09130adc42e35ed01416c3263af8a5ea23aa1d1b7e43c18a207b251b50cfa3042d4814f2690340b45ccfb14f1043a61df1d1d33be5b9c7cdf3d7d08a2533190e4722070361148d8aced497e3705d7fdb12208f9fcdb4902bb974670586c48b52de5f63fc208b523ae729f714123d2ed1cd1c02a921bc586c6f48883f45f57241d5571504c234d9ca7dd56228b6c0b63a3461c11b400dd74bc7a95bd95d98d63bf6556b05073a1ef6f", @ANYRES64=r5, @ANYRES32=r6, @ANYRESOCT=r4]], 0x1) 16:49:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x4000000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:49:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0xcffd2109241a2778, 0x0, 0x0, 0x8, 0x0, 0x0, 0x101}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe3461"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RESET(r3, 0x5514) [ 1555.850710] hid-generic 0000:0000:0000.00B5: ignoring exceeding usage max [ 1555.885622] hid-generic 0000:0000:0000.00B5: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1555.961165] hid-generic 0000:0000:0000.00B6: ignoring exceeding usage max 16:49:56 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getpeername$tipc(r0, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x181}, 0x48) 16:49:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffff85}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1556.017548] hid-generic 0000:0000:0000.00B6: hidraw0: HID v0.00 Device [syz1] on sz1 16:49:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000340)=0xe, 0x800) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x2) close(r2) dup2(r2, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$ax25(r4, &(0x7f00000005c0)="9d3244ca4674396bf3ba6ae711653d74a5427ea8d4c7aaa31fd9a682b727ea2a3cf537abeaf0701058e51451af04095678875a7771ed8aebcfb6ed43be7b5a36517aa508e4a27d5f5b8602749e0cb0df6d9939ecf6a48af703bdc851c620d9b454787db1f773b7c9ea93526a6b88771294d21fe2c7394599e7e5a5ce68a1470a777ce50424f796cf57375931700d25d3986707e6a96240ce82797ce88438b51454bc1b960fdac965342ceb834f38cc75a1ff3a86fb8bec36dac9fb6505db16e49e0d237f70a5", 0xc6, 0x40048000, &(0x7f00000002c0)={{0x3, @default}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r8, r8) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000940)=0xe8) setsockopt$inet6_mreq(r7, 0x29, 0xd40d0f0814c20d56, &(0x7f0000000800)={@mcast2, r9}, 0x14) r10 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$RNDGETENTCNT(r10, 0x80045200, &(0x7f0000000000)) r11 = getpid() sched_setattr(r11, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x12e) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup2(r12, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_FLUSH(r13, 0x0, 0x485, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f0000000280), 0xfed0) 16:49:56 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7, 0x40a200) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, [], 0x1a}, 0x8}, 0x1c) 16:49:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) getgroups(0x4, &(0x7f00000001c0)=[0xee01, 0x0, 0x0, r1]) getresgid(&(0x7f0000000000), &(0x7f0000000240), &(0x7f00000002c0)=0x0) setregid(r1, r2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f00000005c0)={0x0, 0x0, 0x2080}) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) alarm(0x218e9dcd) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002b40)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000002b80)={0x0, 0x8, 0xfc00, 0x6, 0xdb51, 0x3c}, &(0x7f0000002bc0)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002c00)={r5, 0x8a, "6f385d222818dece3a111b5d09fee3881d30193092f30aa1abbd317cbe1551f25cfc2dbbcdc9a7dc24dde43e251cab8182c030f848b1201aeef0e1ab1cb4b61475e81132d8f3e89bce69c3cde3c5d1c902dbfa79a117289093e2e5521b28c35db4243d1691904f08e6f1735e27dab23af39e2ddded644e4faab27d6e3efa2d2ba79775a799aabccd1201"}, &(0x7f0000002cc0)=0x92) getpid() write$UHID_CREATE2(r3, &(0x7f0000002640)=ANY=[@ANYBLOB="0b00000073797a31000000000000000000000000000000000000000000000000000000000000000000000000330e65990b60b000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000100000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaa0701ba7ec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140180002a4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe34614a50cc62b8e721b80b12d4c0f8e35f01cc7470a890ec9b58802d56b86647ae401da84e3cf43c95a92599a959e9fdfb637c0b41578b38d1e7508fd09f68100de116f627cdbe66617efafb5c4a121859e73ba1e3a08cd57aa4cfe59553e2d51da4ac3b62c4c36ab91739fd0470dc3775e21b575dd166f792baf7"], 0x12e) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r3, &(0x7f0000000280), 0xfed0) 16:49:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffff9c}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:49:57 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x200000}, 0x10}, 0x70) 16:49:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:49:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffff9f}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1558.028104] Bluetooth: hci0: command 0x1003 tx timeout [ 1558.033530] Bluetooth: hci0: sending frame failed (-49) [ 1560.107963] Bluetooth: hci0: command 0x1001 tx timeout [ 1560.113420] Bluetooth: hci0: sending frame failed (-49) [ 1562.187983] Bluetooth: hci0: command 0x1009 tx timeout 16:50:06 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x2) close(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x1) close(r5) 16:50:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x6000000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:50:06 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000002000006918100000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x2) close(r3) r4 = dup2(r3, 0xffffffffffffffff) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xd, r5, 0x0) fcntl$setstatus(r6, 0x4, 0x3800) fcntl$setstatus(r6, 0x4, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) bind$bt_hci(r6, &(0x7f0000000200)={0x1f, r7, 0x3}, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r8, r8) r9 = fcntl$dupfd(0xffffffffffffffff, 0x80c, r8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x18}, @jmp={0x5, 0x1, 0x4, 0xb, 0x6, 0x40, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0x9, 0x1, 0x0, r4}]}, &(0x7f00000001c0)='GPL\x00', 0x7ff, 0x2a, &(0x7f00000002c0)=""/42, 0x41000, 0x0, [], r7, 0x0, r9, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xf, 0xff, 0x1}, 0x10}, 0x70) r10 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = openat$cgroup_ro(r10, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) ioctl$TCSBRK(r11, 0x5409, 0x9) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup2(r12, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$TCGETS2(r13, 0x802c542a, &(0x7f0000000080)) 16:50:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:50:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffe4}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:50:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x20000000009, 0xffff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffffff8a, 0x97672d409b7c2f57) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000240)={0x1a6211f1, 0x4, [0x5]}) [ 1566.078570] hid-generic 0000:0000:0000.00B7: ignoring exceeding usage max [ 1566.085942] hid-generic 0000:0000:0000.00B7: item fetching failed at offset 20/22 [ 1566.141365] hid-generic: probe of 0000:0000:0000.00B7 failed with error -22 16:50:06 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1b, 0x10, 0x8000, 0xfffffffc}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) 16:50:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:50:07 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x2, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x70) 16:50:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:50:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xe803000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:50:07 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00', &(0x7f00000001c0)=""/32, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000691810000089a1b594b8ccdb56a0a924cc7114e5109e1377bf3e839b2649515ce89461393e31bb5b96c31042e2a97f9d0e5a1a8181c2244dd61cdf0d2ef56a386a86f6af3b6bf73d8a6beb95c5fd78d8500edc90c9da4488760a5944a6b763253bf4043cacec304b2d351e88386427a36fe6376b", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000002c0)=0x7) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000400), &(0x7f0000000640)=0xc) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x14, r5, 0x701, 0x0, 0x0, {0x6, 0x0, 0x1a0ffffffff}}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000003c0)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0x194, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x23}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d99}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3732}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x545}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x64}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x240}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x3c, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) [ 1566.880588] hid-generic 0000:0000:0000.00B8: ignoring exceeding usage max [ 1566.894506] hid-generic 0000:0000:0000.00B8: item fetching failed at offset 20/22 [ 1566.924606] hid-generic: probe of 0000:0000:0000.00B8 failed with error -22 [ 1568.267830] Bluetooth: hci0: command 0x1003 tx timeout [ 1568.273231] Bluetooth: hci0: sending frame failed (-49) [ 1570.347838] Bluetooth: hci0: command 0x1001 tx timeout [ 1570.353289] Bluetooth: hci0: sending frame failed (-49) [ 1572.427982] Bluetooth: hci0: command 0x1009 tx timeout 16:50:16 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x2) close(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) close(r5) 16:50:16 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x21001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_smc(0x2b, 0x1, 0x0) dup2(r2, r3) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000000c0)) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00'}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000033c0)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000003400)={0x17, 0x40, 0xfffffff8, 0x8, 0x0, r4, 0x0, [], r7, 0xffffffffffffffff, 0x1, 0x3}, 0x3c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f00000001c0)=0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r8}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) 16:50:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:50:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000002c0)=""/90, 0x5a}], 0x2) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0) getsockname$inet(r2, &(0x7f0000000900)={0x2, 0x0, @empty}, &(0x7f0000000940)=0x10) write$UHID_DESTROY(r0, &(0x7f0000000280), 0x55ec) 16:50:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:50:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xeffdffff00000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) [ 1576.337485] QAT: Invalid ioctl [ 1576.384885] QAT: Invalid ioctl 16:50:17 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x2) close(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) close(r5) 16:50:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:50:17 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000006918100000", @ANYRES32=r0, @ANYBLOB="4e00000000b5b000a916e28f5299568d"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@remote, @in=@multicast2}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x68301, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000000c0)=0xfffff1dc, 0x4) 16:50:17 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x2) close(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) close(r5) 16:50:17 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x2) close(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r5, 0x400455c8, 0x1) close(r5) 16:50:17 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) unlink(&(0x7f00000000c0)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000100)={0x5, 0x0, 'client1\x00', 0xffffffff80000000, "358369feec01b358", "4ae83545fc1a0a8b1047bdf5bea97f7159d0bdc9b583b0e3117bbb7a49219b0a", 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000006918100000", @ANYRES32=r0, @ANYBLOB="00000000180079f738c3511a0e040000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 16:50:17 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1, 0x9) write$UHID_INPUT(r1, &(0x7f00000009c0)={0x8, "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", 0x1000}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) 16:50:17 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x2) close(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r5, 0x400455c8, 0x1) close(r5) 16:50:17 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r0, r2, 0x0, 0xa, &(0x7f00000001c0)='selinux/]\x00', 0xffffffffffffffff}, 0x30) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000009c0)=""/4096) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f00000000c0)) 16:50:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:50:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) [ 1577.233387] hid-generic 0000:0000:0000.00B9: ignoring exceeding usage max [ 1577.252287] hid-generic 0000:0000:0000.00B9: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1577.307366] hid-generic 0000:0000:0000.00BA: ignoring exceeding usage max [ 1577.361460] hid-generic 0000:0000:0000.00BA: hidraw0: HID v0.00 Device [syz1] on sz1 16:50:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xf401000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:50:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:50:18 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x2) close(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r5, 0x400455c8, 0x1) close(r5) 16:50:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a310017cfd874000000000000000000000000000000000000000000000000000000000000000000000000000000950000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ede53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe34"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) r2 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r3) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x10040, 0x0) r5 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r6) r7 = socket$alg(0x26, 0x5, 0x0) fstat(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r8) getgroups(0x4, &(0x7f00000001c0)=[0xee01, 0x0, 0x0, r8]) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x1}, [{0x2, 0x4, r3}, {0x2, 0x0, r4}, {0x2, 0x3, r6}], {}, [], {}, {0x20, 0x59a74579e57c1845}}, 0x3c, 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:50:18 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000006918100000", @ANYRES32=r0, @ANYBLOB="0000000082b187380e33f1e8dd7d6044"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000000080)}, 0x10) write$binfmt_elf32(r0, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x5, 0x5, 0x0, 0x8, 0x2, 0xd88139062597bb00, 0x0, 0x1a0, 0x38, 0x2d9, 0x7, 0x3, 0x20, 0x2, 0x101, 0x0, 0x8000}, [{0x6, 0x4, 0x5, 0x80, 0x800, 0x9, 0x81, 0x892}], "95e6e92f60b33e1157dcd2c94d60e7f7e4e75cff7ee87b2f93de53fbdcb51a4cbc118dfe14c861c07d6860e9d63a7ffe329187ad69a2a8c006456d261a124f29ff049755d796834982c16f07163061280b9ff8e4e827bbca691db2f8ae3754723b9b47a59b701920e684a42d2eebaa685070ea99c545f9cc80c48158479100a05bfbbc227582f6846145d1c9b089cc25e42e857228e4854f11f43db8d492bbd85179d3f7fef350075d96308ffec32c7c079fc6e8e980920399ffee64f6db4dc30cabd5fafa3ca44ad180bb44", [[], [], [], [], []]}, 0x624) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) 16:50:18 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x2) close(r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) close(0xffffffffffffffff) 16:50:18 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x4, {0x3a, 0x6, 0xffffffff, 0xfffffffe}}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) 16:50:18 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x2) close(r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) close(0xffffffffffffffff) 16:50:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x5}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:50:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:50:18 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x2) close(r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) close(0xffffffffffffffff) 16:50:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xff03000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:50:18 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)={0x2, 0x74e, 0x1, 0x3}, 0x8) 16:50:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x6}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:50:18 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x1) close(r5) 16:50:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000002c0)) [ 1578.448089] Bluetooth: Invalid header checksum [ 1578.452936] Bluetooth: Invalid header checksum 16:50:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1578.524736] hid-generic 0000:0000:0000.00BB: ignoring exceeding usage max [ 1578.559445] Bluetooth: Invalid header checksum [ 1578.575509] hid-generic 0000:0000:0000.00BB: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1578.661322] hid-generic 0000:0000:0000.00BC: ignoring exceeding usage max [ 1578.698190] Bluetooth: Invalid header checksum 16:50:19 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x200, 0x400800) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) r3 = getpgrp(r2) prlimit64(r3, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) getpgrp(r6) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r8, 0x400455c8, 0x2) close(r8) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) getpgrp(r9) r10 = getpid() sched_setattr(r10, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) getpgrp(r10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup2(r11, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r14, r14) getsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f00000041c0)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe8) r16 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r17) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r18, r18) r19 = socket$inet6_tcp(0xa, 0x1, 0x0) r20 = dup2(r19, r19) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r20, 0x0, 0x11, &(0x7f00000042c0)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000043c0)=0xe8) r22 = socket$inet6_tcp(0xa, 0x1, 0x0) r23 = dup2(r22, r22) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000007e80)={0x0}, &(0x7f0000007ec0)=0xc) r25 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r26) getresgid(&(0x7f0000007f00), &(0x7f0000007f40), &(0x7f0000007f80)=0x0) r28 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000007fc0)='/dev/dlm-control\x00', 0x810400, 0x0) r29 = socket$inet6_tcp(0xa, 0x1, 0x0) r30 = dup2(r29, r29) ioctl$PERF_EVENT_IOC_ENABLE(r30, 0x8912, 0x400200) r31 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r31, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r31, 0x400455c8, 0x2) close(r31) r32 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r32, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r32, 0x400455c8, 0x2) close(r32) r33 = socket$inet6_tcp(0xa, 0x1, 0x0) r34 = dup2(r33, r33) ioctl$PERF_EVENT_IOC_ENABLE(r34, 0x8912, 0x400200) r35 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r35, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r35, 0x400455c8, 0x2) close(r35) sendmsg$netlink(r1, &(0x7f0000008080)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40040110}, 0xc, &(0x7f0000007e00)=[{&(0x7f00000009c0)={0x1470, 0x16, 0x2, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x14, 0x46, @ipv6=@local}, @nested={0x1170, 0x60, [@generic="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", @generic="8d134db2d859ebc38068ce66ced9868c02c5b02dad2eb606b5542117258e2d93e906f53d1786bd8d5698f06522195508dd247ba6662052e51f70bc5872425221d14f08d569b66b32d5179e2252d6160d5e62b2e3603d28245120fde1f7ad92bbbbdb6209bac2435ef9232c1498eda415b860e76bfb6942d8967ebb0a42b973bd357fc3d7a5426f2b8f475297517d1743bd46914ae482d50f0dad96222225f89d3a5e870a44ea5dfb2d4b57a8162493ebc083e874d7f387ea5f8721ecaaad849f3c1a7db9a139558a3bf05eaefdb06a39da586db3e978c0322f59aa", @generic="76ebc05562a723d7af4842f204a3524a98e8ccaa807c53c0b2e5ca7c925a1ad88839238bc9711dda54237520bf71f1f53faf884ddd3bbd614e29f4a6550df90e622b0748eb964437f9ad14a8f7acfbd3070d6c52485a2a726097971f39bc7144a8817df2c8dd1fe3d26ec363cb1a839954106f4b37c5313535cf981e5bcd2336d54e2341fc92a929", @typed={0x8, 0x53, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @generic="530a0b25dfa801bc931d5e273ba8d9de210c0117ef5e9c7d54aab699a2eac678493f2c0abe8f7aa52c07a4a4ef62ea33fb10725f4f2421a8982e058152612932a352e8dc08bd8ca9e2ba38b47f600d275bc1b1de9d267aefb7b6af", @generic="3793b188c37a3a8fb64fd521aa4e426c8f748218befa8807a2dbb4d0a0b5962048d0e14f6f45a8a4af5e2b1799", @generic="264331fc8ab762ed0de9ff741059d4c0aeb04d56e78c432fb10824c28ec07b3c25f14c987b26973780b316c6a65a0570261f0ee9ba799197004914a527dac7062abf4bdb4d58e447f33eecfc97e27ee3304d2383e674e123bdfd101e1cf8b63866842aa6aac3d714d36fa9c05f2f13d852f1d2d8a2ab655a47fdb32b31e6bd0ef9767d6d6013020323a722b46f4446ac653150635e23e93f6671e60a15e96eb989e9cb2056396821425d056a2fc9f60f60cc2ba8a22e1a2a872b635a72637b768e3dca90f7fe9569a5f7a54c", @nested={0xd0, 0x18, [@typed={0x14, 0x52, @ipv6=@rand_addr="e42e9f06388021013457f7b95bf003b2"}, @typed={0x8, 0x31, @pid=r3}, @generic="9e0d8bf4a52fcb73b1c70fac4b9a486f40117842358b61b7eeae2816b97c5724a6cc9f09434f6b3f4090cbacf29d89e2e8ba7f5a5269ffad565e6d50915a21b592d27ce128f1bba72e20950ac60162aac9e03b97595970dee1966271721e7c0a049b2c956c885f55e4b3f0d1c3949903c0a3e8cd7bed48ca1478e9647a3d1870f17e07e6e891cf25495afb1e77c78fe2fe3c92c37d71607a9c33c3e72a13d7d041f473892407c73bc4110524d0"]}, @generic="2cffb1", @typed={0x8, 0x77, @fd=r5}, @generic="98fc4afac7a0b5989ab794d93222d56b07ac0072fe9a3f4c7be64ff75199b14d4d80a1643e06fb435d698fe7230a4ba7458be1a2fbabc9af61895e9e3c10961004ef7f028e247734de5cdfc1099b8c109ddfa9307be5304cc9a3170a591821af03e5", @nested={0x48, 0x45, [@generic="f0140d7e3c21e757a2515166afc63d6ae336f42b0391a671137809597a198ddc1a65d0388a7467506a94bd20d6a625876ef476139874830fc855edabd97b4c5d6557"]}]}, 0x1470}, {&(0x7f0000001e40)={0x2360, 0x20, 0x200, 0x7, 0x25dfdbff, "", [@typed={0x1004, 0x66, @binary="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"}, @typed={0xc, 0x77, @u64=0xbf18}, @nested={0xc, 0x74, [@typed={0x8, 0x92, @u32=0x4}]}, @nested={0x24, 0x57, [@typed={0x8, 0x2a, @ipv4=@broadcast}, @typed={0x8, 0x19, @pid=r6}, @typed={0xc, 0x18, @u64=0x1}, @typed={0x4, 0x5f}]}, @typed={0x8, 0x6b, @uid=r7}, @nested={0x98, 0x71, [@typed={0x78, 0x88, @binary="c47864d8781525989c4c5ae995e79f67e91f709fe9a7853b6a72abb7286f6089c5d664128607daac663cd3c69bab13fcf2461f7d659e166ad83a9f4204b7319bab10b0bc3dc8698bf685701405f72d41b2d11c217df2d009506d2625ff54cf3b21cf8c191a2b915041cce26ef9566ffc565bef"}, @typed={0x8, 0x43, @fd=r8}, @typed={0x8, 0x42, @fd=r0}, @typed={0xc, 0x17, @u64=0x5}]}, @nested={0x1270, 0x14, [@generic="54197bae6ba395ecd76e91d9c5609f8612e685df0dbb210e9ba558f74a2a9e3cde289e1fc3f0aab64f90cba482b2002a8d7d1dd3dc3215d7d170dddd30ae775a9f0f3e33f75f8acaa1119b786692e14b2b263c90646d4aad53c6d79e5d27ecb4eb6ddde82ae601ec37e3ac74acd2d077ed04503b8253ce95ea0ea4e58f5447e08f35fc3c20b296ab511a5f1a05dcdc2c389cd43607b724a2ee88cb09037a09d7404a26a2356aef3e18f385f4ec389e2881348d44b557bbaf1a02ec5ce790507a3715d35ca276fcf62d0bd237acc04f52d0be0e5f774791ef0e16f2e745334ec112377a122e1d311fedb45cefbcee49223eb72bbf69", @typed={0x8, 0x19, @pid=r9}, @generic="6dc5964a2bdfb1e7120ef3def3a35649dde12088c5bfb509004d5a03d1e9f322515aba30f4121e97e8dd4d99625a8c0b865ca8ca629e1823649d6c74e6c28f3607090cb5cf1eb2450886c095b9b7a248b1a09b7055e636f5f541519f1b7d6c050b13fdf04290a9bbd7cb91edeef4788d793f", @generic="68eba0f44376edb3d6dc8534f8d9d587c957c0049d675ce760b42a9b8022b7da34051132755bb318316ca4ebceedf41d654368ec86c370e6ef0e9555efab83a85604ae81ad0a2964bc4bd62fdc28a465d680d6f3e9a8a083a0f82656746d2983068eb5a5a2eae92d53231fc1ac6a5fb904e70f4e01941d25cd5e2f9948c1a2ae6be348124e901b6cbefd3cd22562858b0f6f5d17e9af8027b5205db64a890b66ad07230db2d50ec29f566cfee9f674ec2745588b13c8d440be40a744a904286e2d8573f7f46b31477bd742b116b1e42735ffbdc569974f3e1d7a5166a5c38837d75ee8780c45cf3573fd16aa4ab07be28aa4f3", @typed={0x4, 0x47, @binary}, @typed={0x4, 0x3b}, @generic="3fdd", @generic="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"]}]}, 0x2360}, {&(0x7f0000000480)={0x490, 0x2f, 0x300, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x208, 0x21, [@typed={0x8, 0xb09, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}, @generic="d835cce6101964bd1b40f607f8d1563570e834128a0e9bb456a0907e72c33ef4e27c834873747d7ffe0392422b4cb5b10b249dce1ec6500ef5c4ac024554d044b4424af71042ed0a3b5e850f194b26a035be217393036e21648691319165f6162b29bf942e2c1af1062c3cc078126e2f611ea06001bc646ea57df4ce89494fe21198533bbd564abdd27ba70d472be3bb6ff9cc9c6ede24e85b72a1d577fbe5243527c8fdfa196f656d3cce0339", @typed={0x8, 0xf, @pid=r10}, @generic="fd68f03d763255a79db78f02b68a17c3f29eacdc557ff97c0aa46d20c2b12556c4a903a93cba612dc7b23c965e64182feeb0e34f1994356f5f9b68ec61694d7b4714eaba3be297bd7862f491310fbbcc09ce7823976e372f628714544579eafd389390ad22cda16d851616fa6053799927b97f5a746574c3e3adaf63c8eba3adf072dfdc", @generic="f7ca377bbaf406a594cd842d5e124e235d3d5f8db75a22b72551657f4699a025aee80a1574ab426215eff5aebf1594fbc7f3e6f6162f1804cc72ae9223bbe2ed78f34aa6f5e5200edb005f42482e240f884af90dfa4aaee80e6420034b4b2f7a4ec0aec9f2bb40810028dca64a4b238f3689122b5cf9fd14ca8dd0f50a5b672ed52ea279e8c91ed90877c4370764e691131a4770531b15b8ff59fa24d0f73c8d8f16ea7b036dd1072e1b828832086577cb0d4efaf7723307651416", @typed={0x8, 0x33, @u32=0x4}]}, @typed={0x10, 0x1, @str='syzkaller\x00'}, @nested={0x1e8, 0x4b, [@typed={0x8, 0xa, @fd=r0}, @typed={0x4, 0xd}, @typed={0x8, 0xf, @uid=r13}, @generic="5630d54c03ca53ab84a325d4641e919ba2d8417f5cad3aee5c5550a0872fae11df23e61675b494a39ca6656af520b75a8948366c3670632d1eff5b9d0a1b60e2bdd2e885c9baa4f6", @generic="8c05e9734aa648407ba0b062fdaa2310379dcbb2135d2acbe7947e4e601de423897be24f99968ab8c06ea9837a17b00c4f7fcf3e32a4f03db64389fd5a", @typed={0x8, 0x3e, @u32=0x8}, @generic="c73436b3b51eba4a20c7d9869a66b5e72a17ebdd303aeb5df4fac214a8a5772b3eeab82ab5282f61344180fb9be51b9cc34cc8762a3c475144b42743e6b22a3537431447a4fff40907b9130198d2a7b7bd0fe85548d10eacfcabcc32c26ca910f45e95939057e03ac4e4738f4bf3c998c0e189ad6a2ac580dc033b68466c468bf8d811968f9ffbf2a3f45ea30080eb121f214983cc798d0a0d894f8b4501b7a951ca08e5e0e32bd5f03672926835b977a3719a7d473ccca9b05fbbd636310fb8460b40044bf75683c889aa8c7dc9a1d8406867da2c98bc2277b4e7848bba890c6c3f51e45ec4e8405db55a9b", @generic="697f1123c1b2d2b42f8e4bde03e74c0d75db0c9c725a5fe085f69a1f3ae123db865e8668b32e4b26a039f682f8bbcb062bf1b5e3459ace290aed08654472d873e82537903227e10c98cca2a6a2e06c6d3260c66d"]}, @generic="8e026186c4327b7c74eadb5cc37b0b1b92c22ab373e6273472c3119102864b40f54906aa1cb17937930593ca5b9810cdbce993abea6491bcb8a3fddd29950d396f6fdd6090c365b30814522feba0b24d8a3016c96e017803bdcfe39f0a426901ce7cf5a05dc2a4f58192916867ac2e61dbfd2ae22f6ec7", @typed={0x8, 0x0, @ipv4}]}, 0x490}, {&(0x7f0000004400)={0x2618, 0x18, 0x4, 0x70bd27, 0x25dfdbff, "", [@generic="028df7ac6ea7fa5477cd1987ba9d24f1739a72067e85bb3af948efd518a4899a7bc47fe719a3a05c26a6fd1de40433122329387c1058160e35b844e216a0ee8fa7d4057cdc2487ea78968ce05c22e4c267f475c2d6181ec2db55a001f55408dca0eca2208e5d1e848a8c2c37b110683c1f1210789ac565b38a033a0e4ddc1b9ddbfd6f32c0379de943c9bfc457f162d2ef4cf410c1402ff12b13a78649ac587cf0c55353d1558bb32404a3777690e83f58667690a0a65792ea29cb07d320bb7bdfcbf4521377aecb28c1d3202e4e0676f026fbf8040f9b9fe29e717b629104be82343b110d99f8ee1ce8e2f9d3a0654fbb2efb", @generic="16dcc93e19c419d4e63963a9f3e4f2475a8d5ce7b78e8cd8db71bd0b72d88f997ceb8ae96082bd7315c8620e18ba424a2e6b99b41e2507275cd0a6bbc8cade6f2769e5d1327be785dc747b8a046415cd7b8dc21d3dd09da0ac5bcff9b86441c465e49fd2322aa9b08c64d48bb628958b48ad0dba59874e03c9e3e83d5ffc806ee2141faac60d5a8c96c7c288c53ec4c1669fa90cfcf6d953080d53be420901ea42", @nested={0x12d8, 0x3e, [@generic="cdd8fb93d1b587f2b6dfb8425eb75fca6057ed3ae8371ef3eb7bc39b1be282ac326981465e10f33b46e4cc0ce252409308c1b57544724d57c1539a404cbf0cc5c1f82e4bcc0202371b34019cabc9494b7c09d54fadac48acdbb5b77fa6cfad7b05d22ca6384092c7d7a4cad86eec5ce6c0c44f2eb9aa5c840e6b6cd925b8a1396a97a7cdba5827eebb14c05609f0ec325463dae54b1b79ff5e0a793544966fee174507dfa96a1a4f02c73ce49303beb495a014b90ba85f03bd94aee8c6a5260b3c19ddb2b85aecc7cea200fe479134ad50c641f6fc90712cd79e44a8672579a020ca09bb1dc7ab118d9fbaf0fa05d696da", @typed={0x40, 0x66, @binary="1e2e88d4bb227f896a54818d417c7f425535108fb45134d3abdcfa937fa5e47e45bce9e4e27a6620e82f5c279bd5ab947d4812e5f385806c5dcf57"}, @generic="7c14137830f2047e3408c93eb99343e6355c804cf5b22341f3524caf8f9725c6f0ff9b9ed72f2ddaf22422d9951a0e1ef6376f53d297bd56723f14b282538396cdc1ffd4948cec1101dad8aa8b845c93d41dbcb1d40a79453f35bab9f27996f4921bfd862a437fc2c845ee1a64aec5a73071111004f30f46f96d84ef353b2be6d877f5060e23fcfb709a3537de2e52b95b9f34c08827a4c6123b1860dc96050e1701d47fdcbc5ff51522989888a84400713203e9c789b0dbed98ae31ee021b44f55f1aa3126891b996", @typed={0xc, 0x26, @u64=0x3ff}, @typed={0x8, 0x14, @uid=r15}, @typed={0x44, 0x22, @binary="a553271efdca700647f67c955685ce86caee86ed55dbe1925923a9b7ac862a5895c61a13aeccb979ebc6ead2cb57278578a85c39af1769ac40cc3c0166c5af"}, @typed={0xc, 0x84, @u64=0x1}, @typed={0x8, 0x17, @ipv4=@local}, @generic="f77f4a0240bf3b11f4baf02a88cbbbab845a078fd514683949ca270a88a3b7199cd3c605ddf0a950913a5d34953b5be49f4ee5e0759d6598bcf7b34011469f6376c9f6d21284692f72786c321e05a00e785c1bdd45bff5591f86c4a7490621d80b1dd630b60be55406b2d9bd50", @generic="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"]}, @typed={0x8, 0x22, @uid=r17}, @generic="bb65a9608835151cf25bc92599fb01f325baba7d3a5ecf99792962f1191ec6c389875bed027288a34e6500061b5a7098de338b90f06603fc500aa2ced61e3a8c3950a270e4c7b86b0289998d7aae2102232d30c51d339f20931e1f1a16419ff694eac946242bf6014981e877", @typed={0x10, 0x33, @str='syzkaller\x00'}, @typed={0x8, 0x2e, @fd=r18}, @nested={0x10f0, 0x86, [@typed={0x8, 0x72, @uid=r21}, @generic="4022b4549a87955e27fd0647682e078009752e6b7b6eddb9b87562e63b3a177b7876c778f515d48ad7fd33fca8983a0ac4e9f64130d122ad631ed71d454209dfc11c6df71264537fd3f6cfdb9b82a273e3d1dfbd7d4033b0c37a", @generic="b76f0fc028e76b83e152ddb7a9d2de07879223792444aa522d10c86c239c5ab34eafdd3d80f3026f940ad2709aea3ecb23e2a382dd7a", @generic="05f955011ebb37f265f60c3f51ee23a60321c84cf0d5d723613c106e05fac31b5a06a5f6f113d205a45626d15b9dd8dea793bd2a0ca5743369c345c31db5f1d7d9d47375778fd3691b65a771acbbc06a7119", @generic="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"]}, @nested={0x20, 0x1f, [@typed={0x14, 0x58, @ipv6=@local}, @typed={0x8, 0x95, @fd=r0}]}]}, 0x2618}, {&(0x7f0000006a40)={0x10e8, 0x36, 0x0, 0x70bd29, 0x25dfdbfb, "", [@generic="ce0c9a3e118d1dea619c8662e3d873b07074dc67791139aa8aa12ec4fe197006de4358718334a9523331ab6b362357f7c62683388cc284caaabef01f2069578fc2d167abe507bc68a15c4001c5b0e0e2f4364ba9a14ed5861c38ab96f4bf7e52e2c3d1c946f1c0e524174616b9bcad57f8b0e53a65ebaad6175993e184baf40d487eefa5ae4a8a0e13cc065ac4ce09c8503c59431739d748b13f1dd5ae3b0847cc54b9462094a313d4932906a5", @typed={0x14, 0x3b, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @nested={0x1014, 0x64, [@generic="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", @generic="7e3ef3254b", @generic, @typed={0x8, 0x44, @str='\x00'}]}]}, 0x10e8}, {&(0x7f0000007b40)={0x2bc, 0x40, 0x200, 0x70bd28, 0x25dfdbff, "", [@generic="edc628c87db92087735d01a42eb586c41c6630d4465503370f5fc76f44841b87a04a560ec3a0c517ccdfac2f92d7af9cb92938a0d1083d81ae6725146ba655a7abcd64740ae26709e821bf232f37a10f8d1f920211d4ca52c94750d3089f7afe53277221cbfa934fc430b13403c7d14af18abbcdf628913d34bb3985faee1cc350caa5ea63c287c87e4c2e1c25261eb6076881831e7133d57306747d3164063952ea93267b3ee760a5e5af53c3e826f18af68c4e31fe4d23ce77", @nested={0xd0, 0x53, [@generic="f25060898b5071026d37c128633a51aef9d946ccf0741db9af6083e7df87827e0e12402f99a402653d26da4e36c2b8367439b76175e1edbcd2c168bca6ad90014b9173d0784a9728dd01dc2c789331b45e075494a474bcdf1e08b56ecb7f1bce3cf49902620db89b20043fdf8061de8ddee7bf7d6947dd6dec4325364c06ad6549bcfd799c59664d1df3e8d52b36801312e296543b16ade8262948e31bf6c7ac1718599912ba8629a0e3ef33a990f4913b32de18417b2aec7b1fbb119190ed3a86bd892f2a55b6fbdc584321"]}, @typed={0xe8, 0x33, @binary="6f4fc7186e31d219b75423cc7a0ba97f467fd278a9f1f273211fc98f23faf32b4726d871d37ec6610cda51c0c4f219a1b447382f47a53dfc6126e96306f7c51dd556fa16ba5a54ea2a2c91e5f9e5ba8ff18f9feb9df9071bd4ffa56e021d032777a7bac18a3652dc6eb367e7a5ac521bfbc7edf95894cfe455ca2313de77b2010f1f911471ea758407ac047d1d2e1c8d793a1d122d00b8c5c4460a765a513590286e2c59fbe095ebebe615b99eea3f54abf95d18fd15a534d90838c95f269fcf2c3c50d7e1affef3b33a349a56f356df45626feb45ae14ef3d1daf4f28b96081fe0b44"}, @generic="89b854955653febec4700e019c18d8e4493162f677086cf0553fc15c50830410868879350f5e58e47bac12a7f0d6a58ec4d52b8b1f7696c25b"]}, 0x2bc}], 0x6, &(0x7f0000008000)=[@cred={{0x1c, 0x1, 0x2, {r24, r26, r27}}}, @rights={{0x30, 0x1, 0x1, [r28, r30, r31, r0, r32, r34, r0, r35]}}], 0x50, 0x99b06b9494ff03ec}, 0x405e77a7813536a8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) [ 1578.718185] hid-generic 0000:0000:0000.00BC: hidraw0: HID v0.00 Device [syz1] on sz1 16:50:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xc1000, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup(r3) [ 1578.810724] Bluetooth: Invalid header checksum 16:50:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xa}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1578.865536] hid-generic 0000:0000:0000.00BD: ignoring exceeding usage max [ 1578.887178] hid-generic 0000:0000:0000.00BD: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1578.937998] Bluetooth: Invalid header checksum [ 1578.971939] hid-generic 0000:0000:0000.00BE: ignoring exceeding usage max 16:50:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:50:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xffffff7f00000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:50:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1579.029629] Bluetooth: Invalid header checksum [ 1579.034834] hid-generic 0000:0000:0000.00BE: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1579.108877] Bluetooth: Invalid header checksum 16:50:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xf}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1579.161465] hid-generic 0000:0000:0000.00BF: ignoring exceeding usage max [ 1579.176901] hid-generic 0000:0000:0000.00BF: hidraw0: HID v0.00 Device [syz1] on sz1 16:50:19 executing program 3: r0 = socket(0x0, 0x800, 0x7) getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) [ 1579.212333] hid-generic 0000:0000:0000.00C0: ignoring exceeding usage max 16:50:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x10}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1579.293564] hid-generic 0000:0000:0000.00C0: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1580.427910] Bluetooth: hci0: command 0x1003 tx timeout [ 1580.433346] Bluetooth: hci0: sending frame failed (-49) [ 1582.507835] Bluetooth: hci0: command 0x1001 tx timeout [ 1582.514372] Bluetooth: hci0: sending frame failed (-49) [ 1584.587949] Bluetooth: hci0: command 0x1009 tx timeout 16:50:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) io_setup(0x1, &(0x7f0000000080)=0x0) io_pgetevents(r1, 0x4, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={0x3}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) 16:50:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) ptrace$pokeuser(0x6, 0x0, 0x3, 0x6) 16:50:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x18}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:50:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xffffffff00000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:50:29 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x1) close(r5) 16:50:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:50:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x32}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:50:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3c}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:50:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x48}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:50:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:50:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4c}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:50:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xffffffffa0020000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:50:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='\x00\xf40\xdbg\xe0x\xc5 \xd6\xd3\xc8\n\xa5\x05\xdd`7a\f\xc7o\f\xc8\xb4\x00\x00\x00\x00\"', 0x5, 0x97, &(0x7f00000002c0)=""/151, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x70) 16:50:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000380)=ANY=[], 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0xfffffffffffffdd9}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x4, 0x5, &(0x7f0000001680)=[{&(0x7f0000000400)="5552d58bcf3251694ea06c913269609f8dc63e953a08a06d8250761c98a36b76722377130aa3ec7b753f069d3b9c4f26a4eaca47c810e6dd2e85c3b5fa0454d102d26c6b40e32f1acd27231f8f7695d1b352532dfb4aebc2e34289e382be4c55b0a8de69ba7816bbe9ebf1b3", 0x6c, 0x1}, {&(0x7f0000000480)="6a4ac929d259feaeca1020dcfa1ee2b770b156dd1dadcca67ea043a3ce3387856b148fc012c44641c621c443112d4c98d1362d11cddcb2991265098b1441dd997cb7da659cad577e672889dfb80bb5fd0f3162a427ebcda3ae6d3d5a194a67fbad18567012151a92d45d91f661e6ee7166ba41d10202a2aef0f583d0abbb1aa67c1243fc283c90cbf754035756545cf49e9f9e020a77639cb44220f3ec04042d393d6459213d8752302d62237d73e8e5f86bf38523516f186e0f8454450f6f1cec0f94a76b67fac3e9", 0xc9, 0x7f}, {&(0x7f0000000580)="7b54a385af4e2132db1ef247ba2d869d41144827944e5bc5fde18285821f123de3a80faec2b14ba2469bcc81d96cbcfb2abac9b07bf4c64f9f9eba672f18f96a3dba20d0477d4aaf614c520997ed7b21e786aa173229f339ff6670aed3f7b4e88429584c462ca6d47d9bbe7e54291b13b0a3767d121bda8ca473e91325e44ff0f158190465a083be0429786ca229823d9b912da04f314dca", 0x98, 0x3}, {&(0x7f0000000640)="63863b667140b9f97ba90d098362fbce5b873556548ac316b11d3a361924e61334636398297dcbaf50db8c279f1b69e749ecded245e9bbba2fe01f843a66a3c5e7293649364e282220a4b4849e542acce74fd615e31f3ce49f9b103225ad2a3912e5a4a9c533dc96c00c4fe2b03ae182abd11c677f5656ab97034874441c46fcb8efab62e8932680c4269d6f48c417591bde512a6024de49ef0dbd0eeff9ec765fe8a53009b71930629ec642a43277e00a511ae9a594fc784e03334f2576022e5e500154d23a52b969ced119c20201f2ffd4460d9ad62aaf6521d24b675dbde4932a6c8c626ec5168bc40e822ddc8f2f181ac4b118b32fb0a39bff475b2412dad91ab93ef947ced1906ee69c1bc9f8273b2399ffacb206dbbebeba3a561b3431fb6c541208ee9c291f3c327c13b3a09ded990010efa8e5f439309498dd9d2b9a49ee13caa0e89729f78af96aec3613bc1c573b4b64c92285b316059b720fbbe50eb952d8b8911032676f46cb4dcc293c7c0f0de13a902b31991763a33fa5d98121addb93ca1b0b98cb8aef4c78725584601210e9ea3bc453e2e8a410572ebc834da101a29a7893eece4453cd7e0ce6fc0b07540c2acda0af17985aeded89160f5c5ef4a098f4b52f546cf67a0952fca070729929e9209618b64b50569ce2153ed5a8e4f4cf4b22ccf600ed5325d31ab90e4ef31c07563414b62a7e75b145d6fa6cd33a95f896fdde12f0ed09df489f34c260c5d071233a07d1f7df9570137de1ab657be646d959db585a7d398f803648e29fe3d22424c829cd932645a1f802918e46b30575902ba3f863a8013a061f6835db1bb41ad1366241601e3df6ffe2774357bead8c1dc29e2ec02089fe6ddd166d4310a6627ca8c14fa2a560f033e05d9fdfa8375f06407c0c263f03bfa88d226eff80207d85d63b79eb0f2ab21c383cad975c4737125de4f8976d426582faa4d323b7e4c1d75d328ade76797aa845f8e2b0b11940076361bb677b0b27cf0cc1e178c573f7efa04c339ce13a964f4fb48f1cd481bd0fa05b3e54ba981ab43b301d26d24419ae9511dab30fdc4c124a7aa1b47efdd3208697b37c6d23a82826e04b87bde029f50e4ce2453f127fe177fd85c4b4970bc3dca3d6a210a19771057cb6f17216bd7088befc2aa5e4974c65ca724e2b4541ea3a54eddc16532230271bac53f8cbb8a440cf3ff8ab04254de1f983ee1915fce8a3c7d128fc3a07ef261d9bdd576b5f92f9815de9fb77a4339fd983c2551995ffa5c8fe821fb91390d0cdf6a0f098df44fa7aaca1be1da0ea43d61182c9210915aecec67355fb61c6d95494e9e2c0105a9711fbfe33df522068085e25fb6f76d209c5a2d1aac445a4e4c208f092eca96b38fd781f0abbb000512d6fbc0b908f03876bd723e95aacecd4afc79f05bebc82638343e36412c6d73788d21fc96dbdac9d63552d818de9330e5682f5c1a9cb74d09e2f0e695badbe38823e3f2856d4de2563b8d8c049657b82e7701eee9eb7a1dc92ef26f9ad84acafdb259ae64162df3d7ebfe97ecbb7b1057418666a339c76fff17e6c51c799f82b94efe7e8f161b68352c02d028a4dc582a45948bf8a3836f075beb0bd6c4d84d1d18217c49e44b96e51dbda238af7da7c817966957a3d5d29735b24c8c0b116225f13a9a565280be8f3dd55a2f923c05378b12c36e3f34078f02ee4b14cfa433e1cab52976eded3f9c6d21c87324d3037d64c6ecc5eec1e93596848329af7260184a2b027f1f2eae74524b822ca643e23bf2defdd8916653e0157e64d9c76e429824723e63dd01a675b1bb026c994c17c0aab89048b441adf2742cca6fc352e2cf006330f01b02ed58b06ab19912ab97f19fa04b32045742b59ff9a135699b430120344a0acae58fc1ae6a9bf1461bfddcd02f7df00f0f7f01832cec6cbdd012ba72897643e54230db36deb90f9f0bfd8761cadc711e670026697ff3f816cc4c307680ddfca4e14dac617ce5254dd530187c3f52d810fcc776a7c81bebad75da4eed0a4abd66478b1174f7178eaf1d932ceb30b755e0a68db28ec8859c84705b9d667cb4233cc960749182b1fb83c2061d9fa03bdf601d75456afcd932b66ec0aba98a187615e92e791db8702452bc8f3f82492480736ed6494e6e3d5c3b4a7153441f710e79ec4330474ace2af624f38bd6c29e3f798682b625a4e9078eafdc9db30a7f97a5d4ddf82f9ed90eca019f134e09820b86ce82c4eab1066ca927ce7efd606954224cde0027ce9f4bf436d64f7b208035d2e11db40fe4bbb86ec9948afeccb659cad8d5b4645b35baffeec58ad9ce9402fb224c13dc1d7463db8294117b545039cf00cd3bb3e5849a4fdeeac332656ac976c2aa7c9ed107bd6018d2e2622aa3790604c4b3754fa4c766bddd1bd553bd8484d64693084a13911e31c6d21b59bfcd6148ebb9b55ee12a78dc9a9131f27567a69bd0bc5f9d5976d3c0df2e3f0bea102af70292f31d3588b06e26e83212d1cc5be880642b6a347b35c4d2807a2caf871131fe141e989dcf983081fc66178db032716b562e926f9dcf2a16ce4100398c2ca912efd7fe181dda921d3164afc06e599f1a648cb2b878812a19e94e5088a12a3542e5006cddaca08b53b15deb48faba762ce37e9ca856aa46cefab1a9846d377956df6f12414504768a3f439f057a9b78cb49e12ecaf91de2add5ee1aceaf15e88b0c8e8da6971f738423c1c686549111c65d35551aee2582d00b077c6035aef68458e72ad25dd96de5b301e01aa278751647e061bc52a789784f955b9792c6b5a17d71c149b2ad0bc938ace7dade34616f4539a95707e6c50d11121fef2a48f438423944b2a75c03e95b6d91e3fb0cf27dba5b0f08d2fe9aad03e28cc04803d709f56b42e8e398c8e1cdb13172803d9ee47cdca435124fe3ddf8792a3aba89a2e5fcd8d09de35fd537a66e8cefa9a9a1ee8decb130ce7cab3dc6cb8d15d6478808382cfcd70b3500699c2262e10c10007e81533db908f711dea7d0cef9c2d70db6743e4cc79e8badc2a5bd5fe90de3ba2f8c745819dff4e1143d49c326bb5f7970fad8ba3d94faad05ebdf7016457da8ad65bd84fa5fbeede271942b2ab8916f11fe1bc4911f24fbd25b2b97a23316bcaa943d92e331176df8e47fc839e57b4e397aa3161cbc417d04521e396e92c502d98d8af6351535312d449cfd2199ef019d233abe4396d6d1884f768cd955ecf360d723410222b03ee65b76010aea0fd1a5f2fa0fd66f90cba682679001551e5a6a124f7ee407255fab0d27610ee3c9194899dbbdcebdfeea850feafe81e1565a6f458a324761b42f0376b2589d0aa0ac34e19b1239f13c93937fd9ad4971bec7ec339251681cd00790d3b8c1f9f23e0e149d29e10d4149891e44cf5e8f3c344253d5169dda96c8927c13b5e6dc05a6f6a9f77a9c65f462022278ed0a21805a69ddfdbd8132bebf1496444c6821407ac08dbdc28b31aaeb129f406ced15d53ece52908ac41b4b55f3f68404bff4e9ac7d9c19a67ee7f7b791ad3c738532d56e46982aa97e1f3aaeef42f26cdce8747b401f581b318d5488b964ef1b2351b2bba55ed27855ac6929a6ec8fbbd6c2785c714c5801f59edb80a5e1f83b90a3736f16298654b6628de9191b4bedff32d80acfc7dbd389318112fe9857e4f24f3345385e824322b5b5730bfba71fda18dae59eac988a4cd9a3659d8a61189643a9fd1e569ff093f5388bd9a785fca9f55d48c8cd57868b44f0e5b1c542053b522781128ae1316f034d351771977efa1908ef2a3f3ca5a4812a7bf038da90959085b7957486b8bb6ad2af9fc8fdf602d069086291faea849c67cf18a0b8b72d643140f951e0fb7b9438bcc9ba701f56affcd2e54280ed5252a6e92899b3d3edcdd8a3dbfa1071b04edcd8cbdee6ff9a40924edf4170d4d70319e7a4db22628322661d28a5cced05913c327b2af91a35dbf321cd937a971964c164fc0218176e19d935070589fae536a639798a61b065862ec1a890dcac7162a3fafd6b29754c91f7ead45d42c218ae76c230332555169c2e44e25b893086c99c870b4b7233f93ff5ce4665cfe98c6f89d25be900721380538ba31150afc6f38604226c0f25fdff13a7a2db0cd67a826a5080beecb3041f2b30d9bc56aef01d0237ba275c85f0eb6f635e6fc96efd0635597f76fb233da03121ec771fa8e2ac9766330fa29b4f749f30f4a6345c52a16c6f5ffc698aa11fa23f65867bd1f8ccddc1db0e79de9e92e43f36ca692ec7e91b39554c4faaaff364cf5dd374ace7b4b0eefb44bbe1212aaafc1cdcfef21785c22e7df9178a83c3ad26aae668581ea07c4ed1bb97e6300b0ac1746e2e4eb254cab56b8006d81c57c656d120abf8d2dcee47d6b5fde6f33ae46559c33a4acbac01933defd7f65dc10d47fa2c68844f6d2730272f4e48a6c947c393b4d3dedcfff343638b0758f6618c670aae67b57857e02fb44424912586ef69a53966170244ec9f1f6e4a0e58c5f9e36f8ebe8607fba558e8e8a3eef24764539f5bff8964b5800e236147369edbc0fe0ff6ea1638907bd2e3e08f9176d7ad4f888c67b39e2b28710db90c4c909cbd57fe5c3cbf9153872e34a201a4ecd8a0b4ca46b7ead54601f533728d73e7a7820e7e63701daff2551b723fdce53b35aafa43d48c2007ba5440b7e94abeb19a331d9e17c7839e7f44eadf26a034fec51496888bd1e3fc576d360941dafe862cedf004055b7091594de35f1f53e495e50b9240e1926c47bfb5ba16bda598378589c3a6caa8014dd583b66e50425b18c3de35edc7097e158b9fa26b2039742499fb15671e5bed439e54ef458ba26562dfa6837c84994cec1e9169ba16049a27444897fa71d5d779b63fda0a38e3869050a0ce30b250c7247ecde59c1e3dba8b208c46bf289c8642f13c8b49a5953066949a1763cfd07675c272c7cbe452a311ca534050e92c2eb7242f4add1cdefa3ba4446032fb22a7420ba407dd215515b408198a6120f5b7f7d78dcc1c9ff88e6f570ad07e47d26d13e54bc4926d631a856c579761638d6eccaf2097505a849a3340cb37b3c2741a250aeea4d748b1515490f47a2d045ddab0ca194844731069816a6c24ca7d241359bc82a33faeba03e7fab45965c59e7a20f8aea10ed29ed6b2e281a69095ccbf871003f1af75ead62eb5ea891c562f281e81da615df306698f3f6b6f83855d0e420e53b06f4c53becd292677a4188d6c29da56681fa80d07d50bb9a25b24cc91838b497db9d22f4157ad98aafa9946a0245baee504ea56d483d2f4200b930769763634a01640fe8b91f30ba4b5cb8548ce65f2271be085882a01340889c6f03e7393c33eb9271b37c02597b3fee1812aa2e7649ce08110575d186bb8e660aa5a6d77e5a12d53c6975a20551ac7585e0b0d9fb83fb521fee9f232bbe013d9171b89f5103e505c972526e0a8c983f072156dac292346d8ed9e39f555cec0d4ef3320c2cf5cbac1f6f8111368ea883a8ac405aed804d31c93e53982e4f83de1e5a6347549569a49915060f5f01fbe58196b3edbfad3285fbae9ab335c7304ee4a1b8f8bc7d3a338e18c967d2f7f64df05fe678ff1b2dfc330e9a3c8cb77694684d52bdf847d25c540448d5ecf506cf3361a770741a7de0c3d480525d3866204075c3bc3fe0a054e6e7b7e7ef85b4e57805b07db257a3bc8b6515b487678395f1861575fcfac4d108aaccc72993e8a5f9e79f4b37dcd67acbdbb9870f3c8764fa8b5a960cd00ab2e3b9", 0x1000, 0x9}, {&(0x7f0000001640)="6fd5baa032f46c2843d2bf447b8da97ced3dd7057841417c510a455731cc94ff7ce3fb94ffd4b3f56d2d97b50dbc", 0x2e, 0x8}], 0x400, &(0x7f0000001700)={[{@expose_privroot='expose_privroot'}, {@noattrs='noattrs'}, {@jdev={'jdev', 0x3d, './file0'}}, {@barrier_flush='barrier=flush'}], [{@smackfsroot={'smackfsroot', 0x3d, 'ppp1trusted&]'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x62, 0x61, 0x63, 0x62, 0x34, 0x38, 0x37], 0x2d, [0x7, 0x65, 0x35, 0x32], 0x2d, [0x3, 0x64, 0x35, 0x56], 0x2d, [0x37, 0x63, 0x66, 0x38], 0x2d, [0x33, 0x62, 0x65, 0x36, 0x38, 0x38, 0xa0d8410279cd5b1a, 0x7a]}}}]}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000001780)={{0xe, 0x8}, {0x6, 0x1}, 0x5, 0x8, 0x8b}) 16:50:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000240), 0x4) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x15) [ 1589.471131] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "smackfsroot=ppp1trusted&]" 16:50:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) getsockname$inet6(r3, &(0x7f00000004c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000500)=0x1c) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000580)={0xb9, "f20ba38a9916edfa403ba8c97bdfe02745ca22af96bfe336f6b9cd020e337e2fa2f4b05a5df4f4417e22be7b5cce9515b8cf8ba953caa23c90006cda668ca9891d86f8f7b7cb59279fafa7b48a2745b191014e997a68eaf02a9d1d9a66f1747803041cc35f9cc8098b35515475fe3367d734c23b7e5a4b8fe6447b28cb08909d5658058bf5c268aba3bf7610f40747d35b3ce71b6ff63534f0607bfc27af6f1662966eb3fdecb963f4581be05d1fe5e75828996cae5f3d7b00"}) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x7}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000340)={0x980000, 0x7f, 0x0, [], &(0x7f0000000280)={0xd70e70, 0x1ff, [], @p_u16=&(0x7f0000000240)=0x290}}) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000003c0)={0x4, @win={{0x80000000, 0x6, 0x0, 0x1f}, 0x1, 0xea, &(0x7f0000000100)={{0xab2, 0x1, 0x7, 0x100}}, 0x919, &(0x7f0000000140)="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", 0x3f}}) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) [ 1589.601471] hid-generic 0000:0000:0000.00C1: ignoring exceeding usage max [ 1589.664831] hid-generic 0000:0000:0000.00C1: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1589.787453] hid-generic 0000:0000:0000.00C2: ignoring exceeding usage max [ 1589.857130] hid-generic 0000:0000:0000.00C2: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1590.587742] Bluetooth: hci0: command 0x1003 tx timeout [ 1590.593141] Bluetooth: hci0: sending frame failed (-49) [ 1592.667769] Bluetooth: hci0: command 0x1001 tx timeout [ 1592.673318] Bluetooth: hci0: sending frame failed (-49) [ 1594.747783] Bluetooth: hci0: command 0x1009 tx timeout 16:50:39 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x1) close(r4) 16:50:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x61}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:50:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) 16:50:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:50:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:50:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:50:39 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000006918100000", @ANYRES32=r0, @ANYBLOB="0000000020000000950000002bbe96c1d4694f67d7246f6d0000f2b6"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) 16:50:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x63}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:50:39 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) r6 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r7) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) fstat(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r10) getgroups(0x4, &(0x7f00000001c0)=[0xee01, 0x0, 0x0, r10]) r11 = socket$alg(0x26, 0x5, 0x0) fstat(r11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r12) getgroups(0x4, &(0x7f00000001c0)=[0xee01, 0x0, 0x0, r12]) getgroups(0x4, &(0x7f0000000340)=[0xee00, 0xffffffffffffffff, r12, 0x0]) r14 = socket$alg(0x26, 0x5, 0x0) fstat(r14, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r15) getgroups(0x4, &(0x7f00000001c0)=[0xee01, 0x0, 0x0, r15]) getgroups(0x2, &(0x7f0000000380)=[0xee01, r15]) r17 = socket$alg(0x26, 0x5, 0x0) fstat(r17, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r18) getgroups(0x4, &(0x7f00000001c0)=[0xee01, 0x0, 0x0, r18]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$alg(0x26, 0x5, 0x0) fstat(r20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r21) getgroups(0x4, &(0x7f00000001c0)=[0xee01, 0x0, 0x0, r21]) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x1, 0x2}, [{0x2, 0x2, r2}, {0x2, 0x2, r4}, {0x2, 0x0, r5}, {0x2, 0x6, r7}], {}, [{0x8, 0x3, r8}, {0x8, 0x1, r10}, {0x8, 0x4}, {0x8, 0x6, r13}, {0x8, 0x0, r16}, {0x8, 0x9, r18}, {0x8, 0x4, r19}, {0x8, 0x1c5188912f2b619, r21}], {0x10, 0x4}, {0x20, 0x1}}, 0x84, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) 16:50:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x68}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:50:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) 16:50:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0x22}, {&(0x7f00000002c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1600.828354] Bluetooth: hci0: command 0x1003 tx timeout [ 1600.833732] Bluetooth: hci0: sending frame failed (-49) [ 1602.908238] Bluetooth: hci0: command 0x1001 tx timeout [ 1602.913646] Bluetooth: hci0: sending frame failed (-49) [ 1604.988188] Bluetooth: hci0: command 0x1009 tx timeout 16:50:49 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x1) close(r4) 16:50:49 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x400000, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e24, @loopback}, {0x306, @link_local}, 0x10, {0x2, 0x4e24, @remote}, 'veth0_to_hsr\x00'}) 16:50:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x69}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:50:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:50:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:50:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=0x0) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x7d32e28ff50d75a7) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair(0x10, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x11, {0x4c}}}}, 0x30}, 0x1, 0xa}, 0x0) r8 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x9, 0x0) ioctl$TIOCGPTPEER(r8, 0x5441, 0x8) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000040}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r7, 0x0, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c044}, 0x800) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00', @ANYRES16=r7, @ANYBLOB="080126bd7000fcdbdf25010000000000000002410000001000137564703a73797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2003}, 0x20000000) write$UHID_CREATE2(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x12e) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r3, &(0x7f0000000000), 0xfc7e) 16:50:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3366eb20, 0x200900) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xd, r2, 0x0) fcntl$setstatus(r3, 0x4, 0x3800) fcntl$setstatus(r3, 0x4, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) bind$bt_hci(r3, &(0x7f0000000200)={0x1f, r4, 0x3}, 0xc) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={r4, 0x5, 0x0, 0x2, 0x3, 0xee, 0x6}) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:50:49 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="18a850d6764bf7000000000000000080000000000079732e6a48", @ANYRES32=r0, @ANYBLOB="0000000b005b6efd0000000000ff0000000000ea4a1501e7ac10cc463dd8352f3babf49e291d628209e63d305c1605e95ff1ae636b9574d51b64bee44f34af13504020fcd2bfe4c24bcce33f34e7793557b802e4560854b0070a82a1f0e9dfa497546f983beb83a43e8831709a4034b0"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0xd27cefe7a9171682, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) sendto$inet(r1, &(0x7f00000000c0)='uqQ', 0x3, 0x20000000, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000140)={0x800, 0x20000000, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$setsig(r3, 0xa, 0x27) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/relabel\x00', 0x2, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/hash_stats\x00', 0x0, 0x0) [ 1609.155542] hid-generic 0000:0000:0000.00C3: ignoring exceeding usage max 16:50:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x6c}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1609.227101] hid-generic 0000:0000:0000.00C3: hidraw0: HID v0.00 Device [syz1] on sz1 16:50:49 executing program 3: [ 1609.330901] hid-generic 0000:0000:0000.00C4: ignoring exceeding usage max [ 1609.386587] hid-generic 0000:0000:0000.00C4: hidraw0: HID v0.00 Device [syz1] on sz1 16:50:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a2de324b9b8c09da3b7f742b79f8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3810838298985282369c3b3c6dd8735690f4786fc5166b0300"/545], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) write$P9_RCREATE(r2, &(0x7f0000000240)={0x18, 0x73, 0x2, {{0x86, 0x4, 0x2}}}, 0x18) 16:50:50 executing program 3: [ 1609.499886] hid-generic 0000:0000:0000.00C5: ignoring exceeding usage max [ 1609.540928] hid-generic 0000:0000:0000.00C5: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1609.647067] hid-generic 0000:0000:0000.00C6: ignoring exceeding usage max [ 1609.705070] hid-generic 0000:0000:0000.00C6: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1610.988281] Bluetooth: hci0: command 0x1003 tx timeout [ 1610.993684] Bluetooth: hci0: sending frame failed (-49) [ 1613.068172] Bluetooth: hci0: command 0x1001 tx timeout [ 1613.073716] Bluetooth: hci0: sending frame failed (-49) [ 1615.148174] Bluetooth: hci0: command 0x1009 tx timeout 16:50:59 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) getpid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x1) close(r3) 16:50:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x71}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:50:59 executing program 3: 16:50:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000240)={0x2, 0x35, 0x3, 0x13, 0x3, 0x1, 0x1, 0x26, 0x1}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:50:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:50:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:50:59 executing program 3: [ 1619.216001] hid-generic 0000:0000:0000.00C7: ignoring exceeding usage max [ 1619.275479] hid-generic 0000:0000:0000.00C7: hidraw0: HID v0.00 Device [syz1] on sz1 16:51:00 executing program 3: 16:51:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1619.355319] hid-generic 0000:0000:0000.00C8: ignoring exceeding usage max [ 1619.375654] hid-generic 0000:0000:0000.00C8: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1619.452864] hid-generic 0000:0000:0000.00C9: ignoring exceeding usage max [ 1619.476102] hid-generic 0000:0000:0000.00C9: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1619.524398] hid-generic 0000:0000:0000.00CA: ignoring exceeding usage max 16:51:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x73}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1619.569256] hid-generic 0000:0000:0000.00CA: hidraw0: HID v0.00 Device [syz1] on sz1 16:51:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) kexec_load(0x1f, 0x9, &(0x7f0000001a00)=[{&(0x7f00000005c0)="1e925a1b5ee6696448dfc775531f6a3c35880ff8a40e958f37e56611b4d107be19106528939bba265bfd9db691de0542dd355ffc70497f60d0756d0e78bc6249d2e88edf20ea78308e190587b3cdaecf2d7912e37778956fda5f66c3cbfc0a777959135b2bf028e133d529152993612c128fecc20ee9426a290c472c9ad0899dee447433017ced12d2c5f63f46e5770bb5eeed883199696ea4b690f23b1ebfac96a47fc40a5f66b63de6680f051572ab7b621a990c8faa240efe2e7e28e2fcf2d7f07b5599672bfa00c1a551bb05d82d83fabb51e5420442431f90195319f010017ba6814e613d7133b24fcffb", 0xed, 0xfff, 0x7}, {&(0x7f00000006c0)="c7005cc36bf1d54e4d7c36b402aca3f418308ef92340fce1a6b758bdddfd8e64a10efa7f35311d6763cfbdf450037253879c448deaf5ec951916f7d6c7f301016f0c55dde13b18acf7b00ef53865c27f4274ad2aade4ec8f1183de65b3d0e8e6a1ecd89f905da34dc8b8bb66600fae0b5a276beac6006e647b65d13dcc7b42823132c0b0579b1779c2ebf10a389b503a20826383d504c6dba54a6ff479a5e6a388164b6c9c6a1f235f85c364fccff5dbe65de51e68fa7c70fa5a57d2f0970af7732a0056c5da655c8a638b76441b8313fa247f6d3d7313d7523586e2230b5e784e933fe2246d4256138d965ae48b0d97f686be8b7e", 0xf5, 0xfffffffffffffffb, 0x6}, {&(0x7f0000000000)="1a774c298c10b85332ecf410daa7e5735a47dfa1f2844ed006d3af103cab652311b483baa54e2a65aae12e9510feedf868f092f892e44ee78292", 0x3a, 0x101, 0x6}, {&(0x7f00000007c0)="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", 0x1000, 0x8, 0x427}, {&(0x7f00000002c0)="3703efd2c026c2f960e3e84c89db8c41446c9c2b27205dcf85abdd3ab421a561df116266b9e3f5ed5c7d1f282aed82ebef254102a2009cedb7a9850667e0d5bf24553a96d19670691fc74db1050e59540eeabdf3f963eddc59c5efbb51c9501737e3a9874196254bbe1483e77eb8955c61864201abe18837aa552368b546210300799c55", 0x84, 0x0, 0x100}, {&(0x7f00000017c0)="e6b06e0fb0b034cf131eb5bfd2db41c4bb06c5f5247723aac808373a14b0fa10f2490c275cfc7274bf2cbe43b2c1199fc65f4cb45cf9b2640a25b5803e8cc9204e2ab02c6e05afd1626f2cc64bb4aaea61b6b545fab82468496fa928481d0eb1db28d6313b7330da82ad3442f06272d61b92c20b7efda183aad927d71d2db37684c860adaf1d509d8eea7580b653aa", 0x8f, 0x4, 0x7516}, {&(0x7f0000001880)="037e00bfd01315b71fde6956d0dcddea210bf135297804b2aba0f5de5cdd89517fe442b5c5d1f0a64ad40d7a6b115e38136817b5c97a2c5786364070422e32895763a66c8dd1d0c21fd8e630470d647ff54c0c5a1b20ea6b146669b5ca48e1d435e59d99e647df546568eac7e7d1864f74017477eabbe40268c2e16f7616d12a9b192ac1be26a2f3f10b87f22143b23a9c46dd9d6b943e7e7c42fb71130fd081d6d60bd777e2024038e0c943e5e935e1bd619baa843b6602d31e056410e3ede82a", 0xc1, 0x3, 0x7fff}, {&(0x7f0000000180)="32b24a66bc7a96c6c5dc68493deae2dfe98ea15b7b4b85d416d60f68d2c5817d3e96421b4c27", 0x26, 0x200, 0x7ff}, {&(0x7f0000001980)="02964cc010dc9eeac1af4d09ce3b6e0ed888ab506a2a07db601ffd6287e7e8b1366d69063194df1fab9acc420d8982d41576ec94ea072dbd5903479ea07c800543dcead8fbdc32147a2463", 0x4b, 0x1, 0x4}], 0x80000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000001b40)={{0x6, 0xd, 0xffffffff, 0x7, '\x00', 0x22beddb7}, 0x1, [0xffffffffffffff75, 0x3b75, 0x2, 0x7b7a, 0xb5c0, 0x7, 0x66, 0xad, 0x100000001, 0xfff, 0xfff, 0xff, 0x200, 0x100, 0x1e3b, 0x5, 0x0, 0xbe38, 0x7, 0x100000001, 0x71, 0x23ce, 0x54b, 0x5, 0x8, 0x1000, 0x2, 0x0, 0x2, 0x6, 0x9, 0xd9, 0x799ccbb4, 0x7ff, 0xffff, 0x4, 0x6, 0x100000000, 0x100000001, 0x0, 0x7, 0x0, 0x7, 0x0, 0x3a, 0x1, 0x28e, 0x9, 0x7fff, 0x9, 0x57, 0x3, 0x1, 0x1, 0x1, 0x400000000000, 0x6, 0x8, 0x3, 0x20, 0x1, 0x3, 0x73, 0x0, 0x80000001, 0xfffffffffffffffb, 0x7, 0x6, 0x800, 0x1c, 0x101, 0x6, 0xd84, 0x1f, 0x1000, 0xcba, 0xd7, 0x401, 0xce3, 0x1, 0x0, 0x3ff, 0x1f, 0x5, 0x1, 0x0, 0x1, 0x7ff8000, 0x7, 0x7, 0x4, 0x2, 0x5, 0x5, 0x8, 0x2, 0x0, 0x1, 0x6, 0x4, 0xfffffffffffffffe, 0x6, 0x7f, 0x5, 0x8, 0x0, 0x7ff, 0x4, 0x1, 0x8, 0x2, 0x100000000, 0xffffffff, 0x4, 0xfffffffffffffffa, 0x1, 0x7fff, 0x7fffffff, 0x82, 0x3, 0x10000, 0x1, 0x2, 0x8000, 0x3, 0x8000, 0xffffffffffff9c75, 0x81], {0x77359400}}) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000280), 0xfed0) 16:51:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200383, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x9af4b94600e8a27f, 0x1) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f00000005c0)=ANY=[@ANYRES64], 0x1) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000240)={0x7fffffff, 0x2, 0xebda, 0x7, 0x1, 0x6, 0xa1, 0x71, 0x224, 0x7, 0x8, 0x6}) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1621.307768] Bluetooth: hci0: command 0x1003 tx timeout [ 1621.313190] Bluetooth: hci0: sending frame failed (-49) [ 1623.387801] Bluetooth: hci0: command 0x1001 tx timeout [ 1623.393210] Bluetooth: hci0: sending frame failed (-49) [ 1625.467927] Bluetooth: hci0: command 0x1009 tx timeout 16:51:10 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000580)='[-\x00', &(0x7f0000000600)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x1) close(r3) 16:51:10 executing program 3: 16:51:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x74}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:51:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r5, 0x0, 0xa, &(0x7f00000001c0)='/dev/ptmx\x00', 0xffffffffffffffff}, 0x30) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, &(0x7f00000003c0)={0x5, 0x70, 0xd2, 0x23, 0x1b, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x5}, 0x11000, 0x1, 0x6, 0x3, 0xfffffffffffffffa, 0x1, 0x2}) 16:51:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:51:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe3461"], 0x12e) readv(r0, &(0x7f0000000140), 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) rt_sigqueueinfo(r2, 0x3f, &(0x7f00000000c0)={0xd, 0x6, 0x80000001}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000140)=0x10, 0x4) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:51:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0xffffffff00000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) [ 1629.470424] hid-generic 0000:0000:0000.00CB: ignoring exceeding usage max [ 1629.528115] hid-generic 0000:0000:0000.00CB: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1629.561499] hid-generic 0000:0000:0000.00CC: ignoring exceeding usage max 16:51:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x79}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1629.616270] hid-generic 0000:0000:0000.00CC: hidraw0: HID v0.00 Device [syz1] on sz1 16:51:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x4000) write$UHID_CREATE2(r2, &(0x7f0000000240)=ANY=[@ANYRES64], 0x1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) recvfrom$netrom(r2, &(0x7f00000002c0)=""/52, 0x34, 0x2000, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:51:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7a}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:51:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:51:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x6000000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) [ 1631.547899] Bluetooth: hci0: command 0x1003 tx timeout [ 1631.553286] Bluetooth: hci0: sending frame failed (-49) [ 1633.627968] Bluetooth: hci0: command 0x1001 tx timeout [ 1633.633394] Bluetooth: hci0: sending frame failed (-49) [ 1635.707794] Bluetooth: hci0: command 0x1009 tx timeout 16:51:20 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000006c0)="c87c3580ea716a1316756ccd13357590e8c1f932a97df24a1e7c673b0eafa36b66c47d19b324aef9a5efbdc81468546014f5c8f23652f7959962c65995ee465ceaacdf03533708ec5e04c4f6054951de85537d0a4550305a9bbf05c2ddd3551c815f3035a2132cab5b14f35d1eae00f25622058763148df36acf1f714a41f4f5b99ea5762bbd54373bcb551915e754e8614d0b6615aec6b56d65c4e421", 0x9d, 0xfffffffffffffffd) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x1) close(r2) 16:51:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x175}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:51:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_ACTIVATE(r3, 0x5606, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r6, r6) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r7, 0x400455c8, 0x2) close(r7) r8 = dup2(r6, r7) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r9, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x10, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc1d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:51:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x6000000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:51:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:51:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:51:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2a0}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:51:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000000100), 0x3d6, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:51:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:51:21 executing program 5: syz_mount_image$msdos(&(0x7f0000000240)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={[{@fat=@codepage={'codepage', 0x3d, '950'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'net/raw\x00'}}]}) [ 1640.560017] FAT-fs (loop5): Unrecognized mount option "smackfsdef=net/raw" or missing value 16:51:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x500}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:51:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) [ 1640.663677] FAT-fs (loop5): Unrecognized mount option "smackfsdef=net/raw" or missing value [ 1641.787739] Bluetooth: hci0: command 0x1003 tx timeout [ 1641.793154] Bluetooth: hci0: sending frame failed (-49) [ 1643.867846] Bluetooth: hci0: command 0x1001 tx timeout [ 1643.873310] Bluetooth: hci0: sending frame failed (-49) [ 1645.947840] Bluetooth: hci0: command 0x1009 tx timeout 16:51:30 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x1) close(r2) 16:51:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:51:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000012000100000000000000000000000000000000000000000000400000000000000200300014000d0000000000000000000000000000000000ce520e3872"], 0x3c}, 0x8}, 0x80) 16:51:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x600}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:51:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) r1 = perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000240)={{&(0x7f0000000100)=""/212, 0xd4}, &(0x7f0000000200), 0x9}, 0x20) r2 = socket$kcm(0x2, 0x2, 0x73) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x29, 0x5, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r2, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r2, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:51:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:51:30 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @remote, 0x100000}, 0x80, 0x0}, 0x24000001) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x91ffffff00000000]}, 0x1a}, 0x80, 0x0}, 0x20004040) 16:51:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x700}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:51:31 executing program 5: request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0) 16:51:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000300)) 16:51:31 executing program 5: creat(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0xa) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r5, 0x208200) sendfile(r3, r4, 0x0, 0x8000fffffffe) 16:51:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) [ 1650.775723] audit: type=1804 audit(1574095891.397:318): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir031180374/syzkaller.zUGG0M/3063/bus" dev="sda1" ino=16828 res=1 [ 1650.901949] audit: type=1804 audit(1574095891.427:319): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir031180374/syzkaller.zUGG0M/3063/bus" dev="sda1" ino=16828 res=1 [ 1651.342427] audit: type=1804 audit(1574095891.967:320): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir031180374/syzkaller.zUGG0M/3063/bus" dev="sda1" ino=16828 res=1 [ 1651.392532] audit: type=1804 audit(1574095891.997:321): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir031180374/syzkaller.zUGG0M/3063/bus" dev="sda1" ino=16828 res=1 [ 1652.037774] Bluetooth: hci0: command 0x1003 tx timeout [ 1652.044540] Bluetooth: hci0: sending frame failed (-49) [ 1654.107890] Bluetooth: hci0: command 0x1001 tx timeout [ 1654.113646] Bluetooth: hci0: sending frame failed (-49) [ 1656.187792] Bluetooth: hci0: command 0x1009 tx timeout 16:51:40 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x1) close(r2) 16:51:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xa00}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:51:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x2) close(r4) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000100)=""/117, 0x75}, {&(0x7f0000000180)=""/103, 0x67}, {&(0x7f00000003c0)=""/202, 0xca}], 0x3, 0x3) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r5, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r7, 0xffffffff}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000340)={r8, 0x4}, &(0x7f00000004c0)=0x8) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:51:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:51:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:51:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:51:41 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x1) close(r2) 16:51:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xf00}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:51:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:51:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:51:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:51:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1018}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1661.249398] hid-generic 0000:0000:0000.00CD: ignoring exceeding usage max [ 1661.279835] hid-generic 0000:0000:0000.00CD: hidraw0: HID v0.00 Device [syz1] on sz1 16:51:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:51:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000200)={0x80001, 0x0, [0x7fffffff, 0x0, 0x1f, 0x9, 0x401, 0x800, 0x0, 0x3f]}) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000100)) [ 1661.414094] hid-generic 0000:0000:0000.00CE: ignoring exceeding usage max [ 1661.445654] hid-generic 0000:0000:0000.00CE: hidraw0: HID v0.00 Device [syz1] on sz1 16:51:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe3461"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:51:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1800}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1661.608623] hid-generic 0000:0000:0000.00CF: ignoring exceeding usage max [ 1661.664434] hid-generic 0000:0000:0000.00CF: hidraw0: HID v0.00 Device [syz1] on sz1 16:51:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) 16:51:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) [ 1661.929954] hid-generic 0000:0000:0000.00D0: ignoring exceeding usage max [ 1662.007194] hid-generic 0000:0000:0000.00D0: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1662.587736] Bluetooth: hci0: command 0x1003 tx timeout [ 1662.593355] Bluetooth: hci0: sending frame failed (-49) [ 1664.667824] Bluetooth: hci0: command 0x1001 tx timeout [ 1664.673229] Bluetooth: hci0: sending frame failed (-49) [ 1666.747770] Bluetooth: hci0: command 0x1009 tx timeout 16:51:51 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x1) close(r2) 16:51:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1810}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:51:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:51:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x0, 0x4000020) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:51:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) 16:51:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0x7ffff000}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1671.029783] hid-generic 0000:0000:0000.00D1: ignoring exceeding usage max [ 1671.068262] hid-generic 0000:0000:0000.00D2: ignoring exceeding usage max 16:51:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0x7ffff000}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1671.080339] hid-generic 0000:0000:0000.00D1: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1671.112231] hid-generic 0000:0000:0000.00D2: hidraw1: HID v0.00 Device [syz1] on sz1 16:51:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r1, &(0x7f0000000100)="f9220dbdd36b1e1b3683e4b056a22af73ddb4453673ecaf3d9cffde1f2b6f8fc7c03ba97ddcd5c812c9f3d8ae4dd36e768f93e8efddd305fd5b4e6c1c27122af0d1f78f9c7e17bb70c3236bd2597f57c0546d5a0b5f9f2c2bad33b9c14086991eb7003bf24292b5a376ca15f245e13ca5ef1cefabb0df95cdfa6d86d8f87b1b564dd4cdae426b46cf3ca6eace397845d8c69dcbd8aa4f0b2f22756b071aa92e47962cf32f380b026496151e376829bb5599ff4959c4893196e55c16eb86552c05b6b85acad04c14492f870089fa526e6a4599aa32025704e565376a4ed8ee1e5ce2c7412c31c7675d856c371496d983fca368348e3520e", 0xf7, 0x800, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @remote, 'syz_tun\x00'}}, 0x80) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r2) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x2, 0x2, 0x73) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r3, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r3, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) [ 1671.220481] hid-generic 0000:0000:0000.00D3: ignoring exceeding usage max [ 1671.254998] hid-generic 0000:0000:0000.00D3: hidraw0: HID v0.00 Device [syz1] on sz1 16:51:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe3461"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0x7ffff000}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:51:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:51:52 executing program 5 (fault-call:2 fault-nth:0): r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) [ 1671.375191] hid-generic 0000:0000:0000.00D4: ignoring exceeding usage max [ 1671.395144] hid-generic 0000:0000:0000.00D4: hidraw0: HID v0.00 Device [syz1] on sz1 16:51:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x10000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='vegas\x00', 0x6) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x90000, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f00000001c0)=""/163) [ 1671.492020] FAULT_INJECTION: forcing a failure. [ 1671.492020] name failslab, interval 1, probability 0, space 0, times 0 [ 1671.595510] CPU: 1 PID: 6160 Comm: syz-executor.5 Not tainted 4.19.84 #0 [ 1671.602410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1671.611913] Call Trace: [ 1671.614559] dump_stack+0x197/0x210 [ 1671.618206] should_fail.cold+0xa/0x1b [ 1671.618228] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1671.618251] ? __lock_acquire+0x6ee/0x49c0 [ 1671.618273] __should_failslab+0x121/0x190 [ 1671.618293] should_failslab+0x9/0x14 [ 1671.639508] kmem_cache_alloc+0x47/0x700 [ 1671.643598] dst_alloc+0x10e/0x1d0 [ 1671.647154] rt_dst_alloc+0x83/0x3f0 [ 1671.650890] ip_route_output_key_hash_rcu+0x97d/0x30e0 [ 1671.656187] ? ip_route_input_noref+0x280/0x280 [ 1671.660872] ? kasan_check_read+0x11/0x20 [ 1671.665034] ip_route_output_key_hash+0x212/0x380 [ 1671.669890] ? ip_route_output_key_hash_rcu+0x30e0/0x30e0 [ 1671.675451] ? mark_held_locks+0xb1/0x100 [ 1671.679614] ? __local_bh_enable_ip+0x15a/0x270 [ 1671.684290] ? lock_sock_nested+0xe2/0x120 [ 1671.688537] ? __local_bh_enable_ip+0x15a/0x270 [ 1671.693292] __ip4_datagram_connect+0x6df/0x1210 [ 1671.698116] l2tp_ip_connect+0x110/0x370 [ 1671.702189] ? selinux_socket_connect+0x72/0x90 [ 1671.706878] inet_dgram_connect+0x14a/0x2d0 [ 1671.711216] __sys_connect+0x264/0x330 [ 1671.715116] ? __ia32_sys_accept+0xb0/0xb0 [ 1671.719383] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1671.724148] ? do_syscall_64+0x26/0x620 [ 1671.728133] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1671.733505] ? do_syscall_64+0x26/0x620 [ 1671.737490] __x64_sys_connect+0x73/0xb0 [ 1671.741561] do_syscall_64+0xfd/0x620 [ 1671.745382] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1671.750581] RIP: 0033:0x45a639 [ 1671.753780] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1671.772686] RSP: 002b:00007f0f6e810c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1671.780406] RAX: ffffffffffffffda RBX: 00007f0f6e810c90 RCX: 000000000045a639 [ 1671.787680] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 0000000000000003 [ 1671.794952] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1671.802225] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0f6e8116d4 [ 1671.809497] R13: 00000000004bfed4 R14: 00000000004d36a8 R15: 0000000000000004 [ 1673.227894] Bluetooth: hci0: command 0x1003 tx timeout [ 1673.233285] Bluetooth: hci0: sending frame failed (-49) [ 1675.307809] Bluetooth: hci0: command 0x1001 tx timeout [ 1675.313203] Bluetooth: hci0: sending frame failed (-49) [ 1677.387877] Bluetooth: hci0: command 0x1009 tx timeout 16:52:01 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) prlimit64(r1, 0x6, &(0x7f0000000640)={0x8, 0x2000000003f}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x1) close(r2) 16:52:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3200}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:52:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) 16:52:01 executing program 5 (fault-call:2 fault-nth:1): r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:52:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) r1 = perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x2, 0x2, 0x73) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r2, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r2, &(0x7f0000001540), 0x553, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) getpgrp(r8) r9 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000800)=0xc) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup2(r12, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r14, r14) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = dup2(r15, r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000002440)=0xc) r18 = socket$alg(0x26, 0x5, 0x0) fstat(r18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r19) getgroups(0x4, &(0x7f00000001c0)=[0xee01, 0x0, 0x0, r19]) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast1}}}, {{}, 0x0, @in=@dev}}, &(0x7f00000009c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) r20 = gettid() r21 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r21, r21) getsockopt$inet6_IPV6_IPSEC_POLICY(r21, 0x29, 0x22, &(0x7f0000000a80)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@empty}}, &(0x7f0000000b80)=0xe8) r23 = socket$alg(0x26, 0x5, 0x0) fstat(r23, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r24) getgroups(0x4, &(0x7f00000001c0)=[0xee01, 0x0, 0x0, r24]) r25 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x16) ioctl$KDADDIO(r25, 0x400455c8, 0x2) close(r25) r26 = socket$isdn(0x22, 0x3, 0x2) r27 = getpid() sched_setattr(r27, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) r28 = getpgrp(r27) prlimit64(r28, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r29 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r30) stat(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) getpgrp(r32) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r35 = socket$inet6_tcp(0xa, 0x1, 0x0) r36 = dup2(r35, r35) ioctl$PERF_EVENT_IOC_ENABLE(r36, 0x8912, 0x400200) r37 = socket$inet6_tcp(0xa, 0x1, 0x0) r38 = dup2(r37, r37) ioctl$PERF_EVENT_IOC_ENABLE(r38, 0x8912, 0x400200) r39 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r39, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r39, 0x400455c8, 0x2) close(r39) r40 = socket$isdn(0x22, 0x3, 0x26) r41 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r41, r41) openat$vimc2(0xffffffffffffff9c, &(0x7f0000001400)='/dev/video2\x00', 0x2, 0x0) r42 = socket$inet6_tcp(0xa, 0x1, 0x0) r43 = dup2(r42, r42) ioctl$PERF_EVENT_IOC_ENABLE(r43, 0x8912, 0x400200) r44 = dup(0xffffffffffffffff) r45 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r45, &(0x7f000004bfe4)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) getsockopt$sock_buf(r45, 0x1, 0x19, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) ioctl$sock_FIOGETOWN(r45, 0x8903, &(0x7f0000000000)=0x0) wait4(r46, 0x0, 0x40000000, 0x0) r47 = getpgid(r46) r48 = getpid() sched_setattr(r48, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000000, 0x0, 0x4}, 0x0) r49 = getpid() sched_setattr(r49, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r50 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r51 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r52 = fcntl$dupfd(r50, 0x0, r51) r53 = gettid() ioctl$BLKTRACESETUP(r52, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r53}) r54 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r55 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r56 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r57 = fcntl$dupfd(r55, 0x0, r56) r58 = gettid() ioctl$BLKTRACESETUP(r57, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r58}) r59 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r60 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r60, 0x0, 0x0) r61 = getpgrp(0x0) waitid(0x1, r61, &(0x7f00000002c0), 0x5, 0x0) r62 = getpgid(r61) r63 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r63, 0x8904, &(0x7f0000000000)=0x0) r65 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r66 = openat$cgroup_ro(r65, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r67 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r68 = inotify_init1(0x0) r69 = gettid() fcntl$setown(r68, 0x8, r69) r70 = getpid() r71 = socket(0xa, 0x3, 0x8) r72 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r71, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r72, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r71, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r74 = gettid() waitid(0x1, r74, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r71, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r73, @ANYRESDEC=r74]], 0xfffffffffffffe56}}, 0x20004850) r75 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r76 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r77 = dup2(r76, r75) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r44, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x4, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00u#c1y\x8a\xc6^\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r77, 0xc08c5334, &(0x7f0000000200)) r78 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r78) timer_create(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r78}, 0x0) kcmp(r78, r78, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r78, 0x0, 0x0) r79 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r78, r79, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r80}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r74, r77, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r80}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r80}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r80}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r70, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r80}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r80}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r69, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r80}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r67, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r80}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r66, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r80}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r64, r63, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r80}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r62, r60, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r80}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r80}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r58, r59, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r80}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r80}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r53, r54, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r80}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r49, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000040)='GPLvmnet0\\]GPL&systemeth1\x00', r80}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', r80}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r48, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000000c0)='*\x00\x00\x00/Ppp\x00', r80}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r47, r44, 0x0, 0x3, &(0x7f0000000100)=',)\x00', r80}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r80}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)='syz_tun\x00', r80}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001480)={0xffffffffffffffff, r4, 0x0, 0x13, &(0x7f0000001440)='vboxnet0wlan0.ppp0\x00', r80}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000014c0)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000015c0)=0xe8) lstat(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r87 = socket$inet6_tcp(0xa, 0x1, 0x0) r88 = dup2(r87, r87) ioctl$PERF_EVENT_IOC_ENABLE(r88, 0x8912, 0x400200) r89 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r89, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r89, 0x400455c8, 0x2) close(r89) r90 = socket$inet6_tcp(0xa, 0x1, 0x0) r91 = dup2(r90, r90) ioctl$PERF_EVENT_IOC_ENABLE(r91, 0x8912, 0x400200) r92 = socket$inet6_tcp(0xa, 0x1, 0x0) r93 = dup2(r92, r92) ioctl$PERF_EVENT_IOC_ENABLE(r93, 0x8912, 0x400200) r94 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r94, r94) r95 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r95, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r95, 0x400455c8, 0x2) close(r95) r96 = getpid() sched_setattr(r96, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) getpgrp(r96) r97 = getpgid(r96) r98 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r99) r100 = socket$alg(0x26, 0x5, 0x0) fstat(r100, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r101) getgroups(0x4, &(0x7f00000001c0)=[0xee01, 0x0, 0x0, r101]) r102 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r102, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r102, 0x400455c8, 0x2) close(r102) r103 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r103, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r103, 0x400455c8, 0x2) close(r103) r104 = socket$inet6_tcp(0xa, 0x1, 0x0) r105 = dup2(r104, r104) ioctl$PERF_EVENT_IOC_ENABLE(r105, 0x8912, 0x400200) r106 = socket$inet6_tcp(0xa, 0x1, 0x0) r107 = dup2(r106, r106) ioctl$PERF_EVENT_IOC_ENABLE(r107, 0x8912, 0x400200) r108 = socket$inet6_tcp(0xa, 0x1, 0x0) r109 = dup2(r108, r108) ioctl$PERF_EVENT_IOC_ENABLE(r109, 0x8912, 0x400200) r110 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r110, r110) r111 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r111, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r111, 0x400455c8, 0x2) close(r111) r112 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r112, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r112, 0x400455c8, 0x2) close(r112) r113 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r113, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r113, 0x400455c8, 0x2) close(r113) r114 = socket$inet6_tcp(0xa, 0x1, 0x0) r115 = dup2(r114, r114) ioctl$PERF_EVENT_IOC_ENABLE(r115, 0x8912, 0x400200) r116 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000880)='/proc/self/net/pfkey\x00', 0x80000, 0x0) r117 = getpid() sched_setattr(r117, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) getpgrp(r117) r118 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r119) r120 = socket$inet6_tcp(0xa, 0x1, 0x0) r121 = dup2(r120, r120) ioctl$PERF_EVENT_IOC_ENABLE(r121, 0x8912, 0x400200) r122 = socket$inet6_tcp(0xa, 0x1, 0x0) r123 = dup2(r122, r122) ioctl$PERF_EVENT_IOC_ENABLE(r123, 0x8912, 0x400200) r124 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r124, r124) sendmmsg$unix(r7, &(0x7f0000002280)=[{&(0x7f0000000100)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000180)="d2f26384e91ee4ea05a86d8420a3ac898d5dde598382be027407d507f721759876045c61ff3c13476df905efc9e69628cb7f781fdbcb2ee2f36731ac5947f5bba56f532bfaaef1553285fd8af8813270da7eac2128dd62c55c5c6a42657ce5eacb4f3c853fe5638868a36e7b015769dd25dfd5ed935a326322d4eb576947788af2790081ae23adb834b8e3309ce88a284d16aa9d3dedf6b1a9f70e5fb383fcebacf114", 0xa3}, {&(0x7f0000000240)="735abcaec459562b368746b3bd986282035a16bd8b6da1bdd4f3618f5789ec54c4e03864a82125a61cb3a2b662b3a8913c8e034d85b953386a0515d3f09d1a56dd3ae2", 0x43}, {&(0x7f00000003c0)="aca6febf44ab68a7c689542a668f7d84a75080d52c86a9525d7fdb49b82a251a40e1a5f946bdf9e667efc16bd1c38f292efed376e345487c5b5688429d12da8c32d5954a9a7da112f18193b304f63812756b9cebfe73a0f8c8a1457b44eb6192f44fe57af52e1a99d83803b5d6eb934498ab08a0ee79ed8ae14601e73c", 0x7d}, {&(0x7f0000000440)="221272c507855f859a1ef54e406522d3bfdde8e448ac48b31309df5be93638c402517261fac521c1c5f698e7d392e4ec7ff4612e064dbfff4cb6e356b7b74d89f60cd165590c4d2b964e4d739f8ac5d96cfe1dea4f4f8e79a7c7def8710dfd51b6b6d2cad6facc322fc69bfb5740e359525d517e538e8c715a8f160eabb5503b0f76ddfc623fc01f447aba46659fd63f2045ea5362201f57d85816eafa9839d51c39accb7127003e86cb0d25be473968d0769e9bac53a48543bd596993e201bddf104960aa53ad933d86852a5f9aed5401af851cae22c9c82d63b4c0bc57872eccf17624da85aa23e81bb8422bfcb950", 0xf0}, {&(0x7f0000000540)="b76d58b203b7bd22095d4370b3e7443496feccd3700d9f4976ee1289a51197abe9ca64e75fc2ae6563484554ebb95606b463c0cc237f42ecd3c21ae2920bf80d18d04ef11c70b74bca6cd01cdc6db2653bacb26ee8dcae7b40b321fab206dbf69cb595928c11fad6b6170e05c630d5dc42c9243c21d4da2a00cc5c6467992e41c444d77c7b56dd7fcfb33b708042dd869e95fe2cca5f5041c006ba1503be0b618aed776f0663b7d477f529f92c6a56cc30061fb981dadbb22ca78606da93f12d0e5ac9b1ec924aab468966685f0fec2941520f064d167f4c5cb7199c55f649155f349af1c8ea1bc167bb3b189afa006fc9c817", 0xf3}, {&(0x7f0000000640)="828d1b4f39dc2f7e4cc6a2aa83d707a3c365706c5016f931b4d03a75673f19f37828f4cdec6d9fb1bbba18db46492fc796e2e689c89fbc7aa7e145666b77d8e155626a5a8058ca565541042704b895c4c5", 0x51}, {&(0x7f00000006c0)="24add6e2f0720346eae7c954736c21b6ff15b487765253b59a3d502fdd95b8c260121cc578a0fe22151b2caa0749171b39e2c5a319b924ef11d84f2bb4351436052067b90b8f3b8a66984171eec452619828f074a30b8ceb55fd788043a7f97754440b0f9071bb973aa20555b12b7401ba03652a88411b7f95996048b8d42339a5d7bc9165bc030827fbe0b32d4603866dc0bbbc606b7cd0df8060dc2d8ef8120755abcbd346789ff4ba3642a5622606917a38dfe553d1eae76fa1e8676c88", 0xbf}], 0x7, &(0x7f0000002540)=[@cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @rights={{0x20, 0x1, 0x1, [r13, r2, r14, r16]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r17, r19}}}, @rights={{0x28, 0x1, 0x1, [r83, r113, r82, r115, r116, r109]}}, @cred={{0x1c, 0x1, 0x2, {r20, r22, r24}}}, @rights={{0x1c, 0x1, 0x1, [r25, r5, r26]}}, @cred={{0x1c, 0x1, 0x2, {r28, r30, r31}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r33, r34}}}, @rights={{0x30, 0x1, 0x1, [r36, r38, r39, r1, 0xffffffffffffffff, r40, r41, r4]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}], 0x150, 0x40000}, {&(0x7f0000000f80)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001000)="928fb1fba34234a67fee15783febacd70fd531bfdd082c29a0b8bb59e8410f4804d59d489eb773772d3f30416c682915b165e0cdc8ebe35b5c190c204ecd5debd6afa7e6ae585d18b8c790e151b9c834d7f1", 0x52}, {&(0x7f0000001080)="17f746133ae0ee64e0f68b", 0xb}, {&(0x7f00000010c0)="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", 0xfb}, {&(0x7f00000011c0)="0b0d0a862e75bbdf5bdc102ea94a467c4eebad29c289806ae8a5341ad3cfd83e43b6a01323ba114b6f57155786ec55ac4763b94a9826749988e12af9e9d27f87392def7d6d0bba9f24cc6d976063f6d0009ef583219b97dffad1303be5288356d44ae9ea19343b31b2e81c9a5ab6e6fadba6fbcbf7ce6c5e41480badb0984d8cfbf728629fbfe1948fce8ab99b0bb8b7531cd84f10a9", 0x96}, {&(0x7f0000001280)="81c0303d8e274757c28964c86190e0bd4d01e92108620e676a843311a256b97b89", 0x21}, {&(0x7f00000012c0)="cc1c2d0e3717445e9cf0a8cd5bdfbdf8ed41cfda729c9d2a27748859b258122890b03dd7e5f91b1f5e152fee070307ac592d37fdfd9681e2fb7733d064747955317e41062583af8f900698847977760df12422c7cbea13b35816749bb4c4513ef14e1b19978a659d3ab7c09b2a129c43e8803e1e107f8bf67e162a5890a5e2b572c305542e1211a8b1de3b2a6933e3c21daa7096c5380774", 0x98}], 0x6, &(0x7f00000016c0)=[@cred={{0x1c, 0x1, 0x2, {r117, r119, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r84, r85, r86}}}], 0x60, 0x59d58bc12fc6511e}, {&(0x7f0000001740)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000017c0)="8c68273af4e361f8d3b2d536b44472bd0e5df044c6f3402aa436a0f4ac28d2d89254838ca487730adef45a281df7fdabecefa82d475b2f9059930f8bd283565fc0984750a6e162cfd3ef05f0a8ba92e4a352406c35e21102729e34fb2ee5bd877ccb03936375d6f358935df81b44ee799c35b3fb969b135ae8b073efa0e2eaf0c00928695e", 0x85}, {&(0x7f0000001880)="f38c1a93c28980c80a19f76279decec39f3fc66bb08e963e1859e8382c5dd6f72305cce7c04720a3e37b6e30c314d224a3b31d98e5d2b2a8204a7ad732328905143fb23cf5c1071ce6a0a0567c76395ff0d08c221f9ae8de25f2fc1dc73f8290028dbdcfafa028e530d58bae7d3bb7f91a63b1cdb948e6240d88cfbd3cf03be8a0245823724d2fdefbf1af5cb24d03b90eaa11bbdaf1da37c8c8864f623dd7b08c91ec59a71c7a5370e731a15432c2381e45ac84da609a8e880f65c95dcb28bfe2a74b378ef7dc07e84a93a64b2c83ec42a19469c249b25aec946c34ea66295ccfa3", 0xe2}, {&(0x7f0000001980)="e244e431c912d7ec444317a314bba709206275cb57d5dca14006d5b8fcfc6917fc23f9a93a8fa9ab7af4031673edeeee436f2197afffd2fb985aa1d7585ddee32c0e5cece7f7fc6e614dba27f1eeec300f2354e7d8ebafdbf23eaabda042769689dadc95727a8f1566213eb59c1db23c19522d0372a26df04356f39a7db8daa2ffe05154b61defe16f52f16451a25ae114d2179478d7940760955d6ca1f9d0da7ef9504cf59bb2655c9275040c1dd0cd7fee202bc217ad5430", 0xb9}], 0x3, &(0x7f0000001a80)=[@rights={{0x2c, 0x1, 0x1, [r88, r2, r89, r91, r93, r94, r95]}}], 0x30, 0x20008000}, {&(0x7f0000001ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001b40)="c6cac4a09396e72ad99e209ca459a03ca27cd1ec1bba106a40d5f8b8fd61e2084c16c65e9bbe6ec9454b80fde9438d46084520582e792914b0d22286cb2d", 0x3e}, {&(0x7f0000001b80)="81ac24ad604051b5e78efd42f813cb99708262886696248fd57430f9d333bc552bb1deb9a84e5d345cd7525b86231578de2685432b115ea00e3bbcaa4bae9cc548b08a8db19d4e38456c2d78c568aef7e451dc2d402034f110f49dcea330e990a8fce7c73d2f02292ea05045b077", 0x6e}, {&(0x7f0000001c00)="aeb2670f6cdf67bf50a28f491d0a2fc8e6fea5021c665a4c64ee00cfc8cd4f9b6fe0a864b307da79aef9d1f46564fa4f2ff721a1b6c410620712899399064faae26021db21f5553d3fa77d9f32beef149eedac6efeaa5e9c2ad27d72a4cdf0540a16c3f560a05e32fb61eb85891cb4f6f3ed04b8f021c01e2797b47c8c18024e7b8701389e797bd789ebf5ddc59538657269dce7a2cf0d1144487bc293f718cabdb220f3812fd023973650bcc8e9c3babaf0281ae1d4eed2c637281811825198ae418ff5a1dc019803b2fd5fc920e5ae5d55687353e4ae708fc5dbeb545be9d6e42d6a822c6df2631b", 0xe9}], 0x3, &(0x7f0000003800)=ANY=[@ANYBLOB="800d001c7470ad17e67340b9c1c01504b2dd044635d6621c02ebb5", @ANYRES32=r97, @ANYBLOB="2ee2e88fefa91b4271245a32cf60d28eb5c6171faa4daa84d9f54b1f7ea3b115730df1afb28cefcae719dcbb3217696975c4b4f12e", @ANYRES32=r101, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r102, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYPTR=&(0x7f00000038c0)=ANY=[@ANYRESOCT=r81, @ANYRESHEX, @ANYRES16=r123, @ANYRESHEX=r124, @ANYRESOCT, @ANYBLOB="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"], @ANYRES32, @ANYRES32=r103, @ANYRES32=r105, @ANYRES32=r107, @ANYRES32=r109, @ANYRES32=r110, @ANYRES32=r111, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r112, @ANYBLOB='\x00\x00\x00\x00'], 0xc0}, {&(0x7f0000001dc0)=@abs={0x2, 0x0, 0x80000001}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000001e40)="928beca7198869c9ceb284d21a83d63746", 0x11}, {&(0x7f0000001e80)="1d2d401a6d2d7fc62409a443920906daed7bb13b4c62a2de6b854e45138bf1a611f7ed938e3074139f1bf8fe40ce48b0815a3db1c2a10ae39c48d75ada3b8926dccf1055c50a13", 0x47}, {&(0x7f0000001f00)="a2997c0278ad597d5f01408aaa0ebfd649bb2bf9d21c4ad1137ec91d5c890371e32625a462619384132d0a1f3fca4e70344229eba838b04741d82a0684e7300c88cfb1b30bb1c233413f1fc670a6156fbfa981a119420748e886ea36e5e02c1e6995400297643b682606cc18bd7a253b15209c847520623c826245c3478c2b467deed2d98d15a1280f55fcfaad6a8e990935102f103328fcd6a3bdd40857ae4ca4dc09d81772ba0880806ba594ce4067380757e85a81a542e218334d78d0553606c201938038fffefa", 0xc9}, {&(0x7f0000002000)="98d9553eaadce20bf2f76a579441d073fee4879a89eecd80eb9dcc581c0ca611567e953aeccd2b0bfd8337c03ad50afbb365bc1674eb57d3649dbfaee5208c6e62f82b2851a55ee26634416f6d9d73e01073cd86302909b33d9f403efab184274427d9535d1e51bd57ff3e9642e4834e0add93ded3281786072fdb5fcda572f47ff47e2b90ea874d2a2009d1d269c5afddd58c5b1f30490f6982ec6689aec5892deba55c635a999a9a0b3d3c5a9624", 0xaf}, {&(0x7f00000020c0)="b3f756f1c6f340c88515c000fce637908727ec70f6064d2806bc3dcd6cb1fd56979f4b7e17b5be41477de37762abe91623e1db72d948dc7d4d3aeca9039ade", 0x3f}], 0x5, 0x0, 0x0, 0x4004010}, {&(0x7f0000002180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002200)="4239cc6ee4d44d1ebb45d8fe822272ed3edab7b7914b4b7f5918b2160ca08a0988", 0x21}], 0x1, 0x0, 0x0, 0x40010}], 0x6, 0x20000491) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:52:02 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) [ 1681.306941] hid-generic 0000:0000:0000.00D5: ignoring exceeding usage max [ 1681.339328] hid-generic 0000:0000:0000.00D5: hidraw0: HID v0.00 Device [syz1] on sz1 16:52:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3c00}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:52:02 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x3, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:02 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x5, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f00}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:52:02 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x2, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) [ 1683.467903] Bluetooth: hci0: command 0x1003 tx timeout [ 1683.473308] Bluetooth: hci0: sending frame failed (-49) [ 1685.547787] Bluetooth: hci0: command 0x1001 tx timeout [ 1685.553184] Bluetooth: hci0: sending frame failed (-49) [ 1687.628317] Bluetooth: hci0: command 0x1009 tx timeout 16:52:12 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x1) close(r2) 16:52:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:52:12 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x4, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:52:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:52:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x5) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:52:12 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0xe0, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:12 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x300, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4800}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:52:12 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0xffe0, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:12 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0xffffffe0, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4c00}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1693.627934] Bluetooth: hci0: command 0x1003 tx timeout [ 1693.633330] Bluetooth: hci0: sending frame failed (-49) [ 1695.707784] Bluetooth: hci0: command 0x1001 tx timeout [ 1695.713212] Bluetooth: hci0: sending frame failed (-49) [ 1697.787938] Bluetooth: hci0: command 0x1009 tx timeout 16:52:22 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) getpgrp(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) close(r1) 16:52:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20005, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:52:22 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:52:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x6100}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:52:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:52:22 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x4, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000340)='erspan0\x00') sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) r5 = socket(0xa, 0x80001, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) close(r7) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r8) syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x1, 0x5, &(0x7f0000000880)=[{&(0x7f00000003c0)="daaa8380496b95451ccafa39ec22bc304041ceb30aa7cb362f8957145f932ba7c9e585863bac03e0539f6661c70fc0386ae7ed01401b7ff48dbd16b9412ad935b19272a1a753a79012dae31112d07ed2096bd7b898f7f303ef1d41a01cb0d7b842f9627ea6735e2e05a952811b18578bbb848ebdfe898dac55783bf5d7f73411972018cf214c375487fcdcb1f8aac577cb04a0d7af06151b969d950da27a0b81b04c961993c09af08d38dbaf7c49e182f034ee8628b7e6ab24e68d57d022721fe8929b106da1c4460cec75935c5068368f522d68341d2470d2650c1bf7c27a824cf4e6e909706b67efcae63685897b", 0xef, 0x5}, {&(0x7f00000004c0)="85470891fc86ab6283bef4c188b3c92bb784547b93ea3d01206de85f88231a443718715b4fd5213a2f46fc4b9afe2044a7a6d77e5ad7d895c10e9058d42ea17e1e283b866ec73356c487508a913babc4f57540ac3cb96a579de7276045fe90713ac16cce0cfa7b7c464286fb99dcf4c81c9b293b94a3c7eded0e132908b759102992e842c031cdacff5e100a1e56950fde742da38c39560db806eb97714229703a42fe66134e7706ad68696612dba4ed90b8c34bc75e23771a145145cf044f9de49ed3eb43f2471be7f2cb976e492cd74a1e9a3ad642b450abc059b0bb23580591883d4fb8e95459bf8b4f8d4915", 0xee, 0x7}, {&(0x7f00000005c0)="6c5be4421890d987f378541f3face43ecbfa49c0a689f4527ce283741cd8119a9e365c07434dc9968b32335f6b340e174a9924b71e26d3b7dbc5abcc1972be4e6518ce0a6a05c59f843593c588b9166cb3f9b8431190e7833fd8a102a2314ba0fbddf4617c8c3cbf1a148851fa3f79ba50d4fd477892aae08f6926b7578b6607f91c37ad868455aea484c0ff4c258050f437f395b6f398af44635df17c314fa388418ee46946fd0b5e72", 0xaa, 0x5}, {&(0x7f0000000680)="6330426a995d381895d1004d1de278261ef5d8b7d3401fabd397f17fd505ebe40ffb2f5c0db4c37678adcbe948256c5f0b9ea7a2765a556cd2ba849f96d530ae39e86242e07180dd708f5919851a01b1931ad08b90f064f91ce6597cb47f3d4ce66665f36527f31bb41345ac788793bb15dbcbb0db777a7b33c82f980365686ac1a87bf0d6e9da032cf6796b58aaa1739a015b4771543cecf8e91b9e7e7fda45289250575fecaea8f5a0fab552a04cf23d7463a7f8ec09e32e5ee90a342dd24c5d60b3563e15ef8945cb0da675", 0xcd, 0x4016}, {&(0x7f0000000780)="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", 0xfb, 0x3}], 0x18004, &(0x7f0000000280)={[{@nolazytime='nolazytime'}, {@noquota='noquota'}], [{@hash='hash'}, {@euid_gt={'euid>', r8}}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000100)={0xda45, 0x3, 0x6, 0xffffffffffffff30, 0x7, 0x2, 0x3, 0xc8f}, &(0x7f0000000140)={0x800, 0xff, 0x2, 0x2, 0x9, 0x26, 0x100, 0x4}, &(0x7f0000000180)={0x3, 0xe9, 0x9, 0xfffffffffffffffa, 0x9e5, 0x40, 0x4, 0x4756}, &(0x7f00000001c0)) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:52:22 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x18, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x6300}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:52:22 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0xe0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x6800}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1703.867945] Bluetooth: hci0: command 0x1003 tx timeout [ 1703.873351] Bluetooth: hci0: sending frame failed (-49) [ 1705.947957] Bluetooth: hci0: command 0x1001 tx timeout [ 1705.955356] Bluetooth: hci0: sending frame failed (-49) [ 1708.027935] Bluetooth: hci0: command 0x1009 tx timeout 16:52:32 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) open$dir(&(0x7f0000000680)='./file0\x00', 0x200100, 0x24) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) close(r1) 16:52:32 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x2a0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:52:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:52:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x6900}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:52:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:52:32 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x1800, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:32 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x3f00, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x6c00}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:52:33 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0xe000, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7100}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:52:33 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x1000000, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) [ 1714.187808] Bluetooth: hci0: command 0x1003 tx timeout [ 1714.193209] Bluetooth: hci0: sending frame failed (-49) [ 1716.267933] Bluetooth: hci0: command 0x1001 tx timeout [ 1716.274558] Bluetooth: hci0: sending frame failed (-49) [ 1718.347866] Bluetooth: hci0: command 0x1009 tx timeout 16:52:42 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) close(r1) 16:52:42 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x4000000, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x80000000}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:52:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7300}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:52:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) getpid() write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:52:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) [ 1722.250447] hid-generic 0000:0000:0000.00D6: ignoring exceeding usage max [ 1722.288142] hid-generic 0000:0000:0000.00D6: hidraw0: HID v0.00 Device [syz1] on sz1 16:52:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) getpid() write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:52:43 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x18000000, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7400}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1722.500169] hid-generic 0000:0000:0000.00D7: ignoring exceeding usage max [ 1722.514598] hid-generic 0000:0000:0000.00D7: hidraw0: HID v0.00 Device [syz1] on sz1 16:52:43 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x3f000000, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) getpid() write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:52:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = socket$inet_sctp(0x2, 0xfe623249b10eac48, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x1, 0x6, [0x7, 0x3b, 0xc7c, 0xf6b, 0x7, 0x5]}, 0x14) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) name_to_handle_at(r6, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="000f908a16b699260eb62938198261bc9fa4286b8db7de0900000000000000f920e02f170aa83500000000000000"], &(0x7f0000000180), 0x400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) [ 1722.804431] hid-generic 0000:0000:0000.00D8: ignoring exceeding usage max [ 1722.841084] hid-generic 0000:0000:0000.00D8: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1724.427968] Bluetooth: hci0: command 0x1003 tx timeout [ 1724.433394] Bluetooth: hci0: sending frame failed (-49) [ 1726.508015] Bluetooth: hci0: command 0x1001 tx timeout [ 1726.513415] Bluetooth: hci0: sending frame failed (-49) [ 1728.587943] Bluetooth: hci0: command 0x1009 tx timeout 16:52:53 executing program 0: getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(r0) 16:52:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7501}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:52:53 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0xa0020000, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:52:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:52:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000100)) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) [ 1732.494408] hid-generic 0000:0000:0000.00D9: ignoring exceeding usage max 16:52:53 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0xe0000000, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) [ 1732.540087] hid-generic 0000:0000:0000.00D9: hidraw0: HID v0.00 Device [syz1] on sz1 16:52:53 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0xfeffffff, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:52:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:52:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7900}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1732.891284] hid-generic 0000:0000:0000.00DA: ignoring exceeding usage max 16:52:53 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0xfffffffe, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) [ 1732.949625] hid-generic 0000:0000:0000.00DA: hidraw0: HID v0.00 Device [syz1] on sz1 16:52:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1733.151000] hid-generic 0000:0000:0000.00DB: ignoring exceeding usage max [ 1733.179775] hid-generic 0000:0000:0000.00DB: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1734.667781] Bluetooth: hci0: command 0x1003 tx timeout [ 1734.673240] Bluetooth: hci0: sending frame failed (-49) [ 1736.747764] Bluetooth: hci0: command 0x1001 tx timeout [ 1736.753319] Bluetooth: hci0: sending frame failed (-49) [ 1738.827764] Bluetooth: hci0: command 0x1009 tx timeout 16:53:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7a00}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:53:03 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0xffffffff, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:53:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(r0) 16:53:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000280), 0xfed0) 16:53:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:53:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = shmget(0x2, 0x2000, 0x100, &(0x7f0000005000/0x2000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000100)=""/157) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x2, 0x2, 0x73) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r2, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r2, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:53:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe3461"], 0x12e) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000280), 0xfed0) 16:53:03 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x3, 0x0, @remote}}}, 0x80) 16:53:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xff00}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:53:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000280), 0xfed0) 16:53:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(r0) 16:53:03 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x5, 0x0, @remote}}}, 0x80) 16:53:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x40000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1743.154144] hid-generic 0000:0000:0000.00DC: ignoring exceeding usage max [ 1743.193270] hid-generic 0000:0000:0000.00DC: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:03 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) [ 1743.474756] hid-generic 0000:0000:0000.00DD: ignoring exceeding usage max 16:53:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) [ 1743.518911] hid-generic 0000:0000:0000.00DD: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x5ca1d}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:53:04 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4, @remote}}}, 0x80) 16:53:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:04 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x18, @remote}}}, 0x80) [ 1743.818865] hid-generic 0000:0000:0000.00DE: ignoring exceeding usage max 16:53:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xd, r6, 0x0) fcntl$setstatus(r7, 0x4, 0x3800) fcntl$setstatus(r7, 0x4, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) bind$bt_hci(r7, &(0x7f0000000200)={0x1f, r8, 0x3}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000880)=0xe8) r10 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xd, r10, 0x0) fcntl$setstatus(r11, 0x4, 0x3800) fcntl$setstatus(r11, 0x4, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) bind$bt_hci(r11, &(0x7f0000000200)={0x1f, r12, 0x3}, 0xc) r13 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xd, r13, 0x0) fcntl$setstatus(r14, 0x4, 0x3800) fcntl$setstatus(r14, 0x4, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) bind$bt_hci(r14, &(0x7f0000000200)={0x1f, r15, 0x3}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003800)={'team0\x00', r15}) sendmmsg$inet(r5, &(0x7f00000039c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="827e2a25ec2a7f35baddf2c83eae5ed681fbbd92634ba09f164fae094ae153f6eb8eef4091a7d895d5369cdffd5d4f932a93dade80cff524cd35abfa3b41ca4d17b7985e3baa018bc92dcee40d286a3b94b1f08fb305cfb8d1645cde19642851d2fb9aac0c73422978eaf6ca1196746e6473e03286be50cae319d902f2740b5d6067490186986b175f0d82a2bb47284e0d428fa028b938504695f73a8a8ea292dcc961a170418ef5b8881389c38a553e4a382f8d3f758b96071c61fbf40129ec67f7c735e33e0731dbe153bc9eccd92983d0980279", 0xd5}, {&(0x7f0000000240)="7b1c", 0x2}, {&(0x7f0000000280)="44aecf574c1bead074bc28da74063f6f6146c38369844812254e7c1e", 0x1c}], 0x3, &(0x7f00000008c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0xb}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x70}}, {{&(0x7f0000000940)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000000980)="09e407a44eb04cdc9fe8fe53363b7a1485576cb2dd2624d06b84b9b1edfef0b31e64c3922106f4424e27af6af9fd8a8a0e44986580cefd872df588cc3b161ab2db5854498a5f7418af0b6593b2e4c9f8b578ba6b9b4463bf5be63cdf2d7a60ee112818a315c11378d934cc3c2e5c682f15628a98ded097080c871d6d526836561a224e9bd0c98b660014d887b9623e4e93838e473cea574133645daddb", 0x9d}, {&(0x7f0000000a40)="e78ea513a3cdb0b911363ecba5e4499ad39a207c277e63e923dfc2c7b35dfcec67dfc1eeec8bd383297d26b1f8ff78372e994f05a7eb2fedf8fdada3b7fea093428e472fdd4111dcaa66cbecc1f3030fe0999e3a7aae4c12b5ccf42748507b154c5553a2bee429fe6c84f952fafa69744075348fea219ec7ec88a3ae474fa8324d3ae6087cb0eb1a4500673635fa7e7c3f1248274623ab50e7e0a3182d76704f1cb3640a36453c762372be9b8267235157f15e66d50c0932896011742dee3ff0a5e86e449d1241f97ae3aa8764d7d1ca7440f2951fde5f88b0", 0xd9}, {&(0x7f0000000b40)="95bc6121fb5c4ad56c65a0ef573ca07ea3f2684931541acfcdd03d2fedbdf30e57d8e3b71ab1f271417cf416f85a1ef5e0f9b0697fbd1821f219ada61614003ae44c63ffea639e4b303b0e5c9a7771af6422622687c6ad0692e9451360ebca2a265ff70a", 0x64}, {&(0x7f0000000bc0)="80e4e9ee776f0a53944013ebf50ed82db7cda8e92a80e14019091888e316e5e10579b3fbb1672e2038c5da9e257f40830a16d8acd6d2d6e3abb081ec9443d8e25a702ce866bf2754f32cddaa06d1db1108f6b9156e9eb8a7370522fa0d31a70b14", 0x61}, {&(0x7f0000000c40)="2e52718acb32c4d530b2ba47f0ef920debbfb0af2b78d4042d355f95ac1722e8a81b88b447afa802c548119b4c6ac2e2ac7d33949786548bf02e38d3149c1321aeaf5fa5cc6120476f6693c2caa46aedcde4e008db95bea544a2859da42f42e9ec3b5350a6f221d19830d51c8db6a53b50fc353a4c6f40e7c29298612de3069286dae3502e964c7c796274fc7c1bc8431be3b7e4c3189b787c48d6627dd01e4f46273873838d65ae8b8d62869e6a3b2a21dbccb82fce84edd383b4ecd0857d61fa61bface6fd52b35c7e37620983dc9c1f9129f6d496c2c70505402e6f95e95bd654f988dcab29b8", 0xe8}, {&(0x7f0000000d40)="dd8a46a019e0636ccb0cf2cc70ec94190aee4a0895c0d469a4692b0931daa7d0e286c3c6089efa4699d31cadda2286065c05d419917a70b803a925e14845a269ee80ceb5ead431be36fc9658db50002e1a17fc55dd27ace56aca9205d0ca02775f19384764088e5277d343d2706422ca9ef80fe1e1113fa37b8b42b90ffd3501ec73b03875734d4cc87e95321177819e19ba9f", 0x93}, {&(0x7f0000000e00)="33a6bc9e24410b5b02842d800c438e42c2ad47e6ebf76e77d6ac4a69e2bbb79a57833588b680e5aad162a6304e0d4d3d031a47ca5c711dc83d80d4c81a5e51237cf9c198297fed6d909bd6deea3323780e61f9903261529dc01c8393449139369602d95af6f8e84eccb247c158dbfdbbc11e24ae3ba3338d5a8f13c273351788ebb7010b1fddc27fc5c2d1d796333316a11583ad82b3ec48c089d55b39be786fcc1b7f5fadbad35962091072dd81ef64515464b42a11758b1e85c45eacb61ca9fc85b163d9405fad2b113711d112c47bdf541d6fed8c1201720d8bda0f2175b77a191eaa981903221e69ba8e8b1dcca0c1eecef45f47e6445ccbad049698e190fb0293772797f85a891cea847d82a41ce9c83d43f2af313993d599c9942df13da2677aa9063367d40a9877efd3cf899c7b5f5fca465bc587306f06d57337fa899054c03aec2e0a4d9d5a0e8b6d56ae4d58b64631d910417f05f1c9b9e47cbafd5c5f9090ddafdbb412bd999e5b87ac1ced7bc6f1f66f7531252e3017e0a82124f434a1b113ea2fc1f0e02d7dfe9e57f254a3e7d08f0db04634b1935755f82e94d54efb8100350f6b8022925838d5de0999c2ef152174c0d89a9178a65c3957435dd93010dde32ca31efc100bfec5978016c791a4304a2df4c73500811966d399e584bd48781f67bad254934ea017bf70fd14ed3a58723b89287b6f8fa71d983d58c498f4d5a78d89ae4a4c7cb9806d124e32fe2ad003e7f889a333e7da5aaa51025393cf48c27a33b0f3efd111f8367f90193bbd7c7697899ea89186d0b4e0c840f6eba1835658fb881de3b70ee8ab48d558d3556dfea58becb614ad830c0ce2f315546a73e46c44043372d5fc72bf7caba4457c874b26b1615c267b5a132204a023037c72db1a4794cb5f7e252ee5243e3cfffe2330b26c42c5a948db4fc2d3ec163c104f7d7a41e20a8f7d8a78713df5cedf2ee253d3d08703b5d6ea710b740b721de60e0ac38c8be253d18159f5196281876cb41171863231be8440154e823717d3b182f2c9f2b6990d97b54c7c74af683240fc65682743a8afcc0d18868b8b7d739af42bcb9e9239ee4c109781e991bd78c3054b33ab0f73a9f833d62a6a980095d86b30b0120ac0b504fa9ed58aa51fc3805c5bc4ec413ccdfef287afb199aec4d3d77f98b6f358361ca49d54a1b70eea4ae96a9bb5c636217950ef79a64b69d0faed65582ea7d73a91302728f5aa3159471aa51e001a9efc0603edb061e4254d4bafee20304ad84bf94be3af9d64ffed4ad837634ab69ba1d2b620b77678ff76ec2c2d7e50c65050179f8a9d1a893247162191fd8033abc474fa4576cd9c865fbcddbd08e68d21a2115e978ef9f0d1641456833ce8babbfa3379a27ee94e04339b56e3d2616760afbc229708a3261ee863bf3338fea34af06290e4e152c3aaea33760cd0e84ad601e8a2ec21204e7b92950fb40466300be04b8668dadfc2c1cd56a632ef52a71f7ea8beca5640322aa4c622982478480b42ce6bcd38bb0e63673b9fc3159741d48b6e15b2f7adc586e91c451208c13162e8de393cdaad664f02c0f276f3490012b3dbfabd02c7d94a94a1fed55ee1d2dabe14ecda782a493e00a10994d8cff4096f0dff396d407b1fe3c9c14778bed9db5f1cae2bacef944fa171a03132ec679952afba61698dce4b55e4ead1b86a06dbfed323ab6d9130de9dbbfb8dd601b3a581c0e6bac12272e102e608036f6942b39cfc24819b2f1cf34ed6f070cad0b41a3a1f625ec7bc264e0256cc0850152711a98a0ce46bf4b9632f37e03a741a0833c77bdb0121d721a2d9cc8649dc58ec00adeb5aad612d936c62a19fd241904884dd61a57b823d614a2e816718b9218466a4bfbe0c4d8e5805dc27b8ec8bdb1155a2f81be842e72441a363a107eb593ff1a199869c3e822b3821de4811b19bfb20aff875bb256b6adf12080b262202bca90be6b125279ac86f22ffd2aee869a287dfb9b3c1641e4a0cbe5cfccd811a0bc1076294afea07ee3ff2ba495afe6c1710f703b902cd64fe7e9a8bdb3be6f9228913a29e3408b4f79f46434942ff5f41416d2efb4ca018c28925b760198ef0a0b0ab84ae961ca647bf2db2d52834b9428eade7e0d31eff2f0a3d260d53bb816b55ecf04019d43fbc9d3a2e834a58176577284815aafff526017950c9ddbba7c6cca7c2c051cfbd5d805eb68a8e2f69798e110b83e9a751fff780b824dbbbfc4b42b857042365d04194e684653a7a21823323c757c6af74ad40689b5af1ea2e2502b833dcfc3a05920e741a6f72f0352f40d94385a8bd8cfebecd30934c77e2a7db6b3561509be82d3835b93bfa78ca223b52cab107655ac46d354598f6273074e4554a86eb7d7382b1485e201265c2ee97301d158c5daf8dd85b38cd511c30cfffee313f94b034b4013f8d02cf84e60cd5640e60a0fbe1fe8b414418a824d23a005659097477e956c32b2f4c39e982f910beaabe1cd797c52a89eff94ee70e94a2ab5b138dc3b34fd17bdd584040231abe05a751a9a6a38b118124ff3cb55ff2634b4bf3823b30d3c4bc74de9fdf6e4c488d8e7c8273429f5f6767baf9f8721d168b368c1e18c3444dcd7029efac701685621ab6ccdf8b1f43ebb28db54fa1322cbe30acc2ba69d7dc7849d6ce0cf361ed7d9335fdd35ba76bdbfb634ccbdc36dc2c33f1e6d550f8605f6d03d4dcc066843d10b1e38dfc335bba9dd2f41cfd31c6fa10d7fe95be5fa194ed3223d2388617dd7132c8d2a1b42615e9650b6ba4b39030b6ba530f88e8aeb6a34a7eed17507ff864ed65001b13c7094ab324d2419017bc1533883bc450218b13f30112c7591ab90a1b6d93c1f6142027fdce53f5440172535aa923c6d7b8e4d24af8bbff1f8ca5655ee1f1c131e95c57183e3962ac2e61a4db5a5e9e43d154cb67ff9bf7a160924798949bfdbaf97c1c8e6c907f1ef8cd3b259828bb02cd113c90efb23b01cafe6c0aab1e47cd8274dbc4e57018c50276a3338a0b9b2959716efde6cdb4195a74d4daacb7e16a502c41269176d3c009af3ee505bb31db0622658a93b5446b48e8af1d9837d44779188348bed028031fdb423316b4ce901ae01fd74c169f30548e51d6877342fec83deedf1c52f83a3f4ab96d6dcd65b02940855c56419be58dd3b55e77e00d46b5df49f0c26094f3bbb559b4884e2d54498045452ceff47de2e26d1d98e200318566240a1a3286acaf6440f598e015733e7340396290428c741f88dfb759b19e33f1b12466288afe0ebee5f90f15a5c370775e279d244638103cc144d73b5c2984166d748cd1d6f7f8b99bbb0f7df1c0e528c85677ee898fdca38b58fc30ede58bbc0b8b78fe47ddac2512f9cd5e6e184960cc1b04088bd6caaac74cda2e97adaa7e70aab245c01864a6685715dc8ba527c50be10600c31b4e972bc059475a90436ddc5f8306d25bf77e74ce355b7c2215e94273f52fe6ae6539910e13a2d3117bcd6dd526ee48cbee853a1491f04a1f761113bdeb10b4e5b8d37fb641c975d08b24a4d12732777811c0c59b34c8d96da522e21dcd82c71931cc663c418481890ee6533a622920bb77f2b96cb25742a1c5739948dd53b89e89219708c83a953b8928d94ca50644d2bc2ad9dbee3f416054d73b30127e7909f772ab4af92a296cccbb2a83f9dfb45ef5266f4a809b8c7eb597096e86532bf0b102d4094ed17306e10d2697a96d338b022ffd357bc207a6ca5e060446771dd3831184f3eb8f905875a1790a5567b5b9386e8521aa7972690276e67046a9e720abab3efcf21397852244547771861fbbe88abcc4e8154928a27ffecc12be089d59638820ed7d29fe96f0ae27e30df4e924086d1c1aafcb2d82eaca53a2db07a340c25fe6cb725b9b4cb838a534bed1bd95f6b8857172a57bf2f1ae37876c9ec060c0dd5dd3080f5286296ba1edf685e6f573007cf10f159c692dbd9f5002597549c9c940dff5550adeb452b59ad58ef8e9428e05d62deabe7c0e842f8d41ebd1a6728951bbfb85f73f9dc7fd91a67134be51263498277e73ed12015672ee5c97406243082c80cd11e5d9a224a00dffdb55f2f86ce96445b27921478827ebf9a7aa8a0fb58e2c613a977c836d2dd1762b91680b9309905201cfd3c8162f9c9fc6f6f9b35c5d07a3f67f6fea72421ca1dfd947674e7ae3d47caeeb9acc66fb16fc5f73e2b9f4d6fad5e4ae0b76ca5a9cb4c36b5d567e5b96735e630bb2306ee4bf93eb55484bb15d75abf3957d9962f46c49a81975c357188260579a3ea5f7d91f55c1b712cccc03e8e9cf50323e59c7953ed58f13b94f2a243cc89c60d0d4a4eb208782131ec4219169d602e48e98cd48fa83dd5a302a14cc1bf1723ec64fbb46cb69f8d0ce4cfe75e220e0ac6205b9fd926b0ebd1994682b1922ba957f58c0a201258e68b81ab08d59404c647f93a9d489f9cff5606e2192857e217f7759ab88fcecfac0a67ea0ceda526dec8f6bbeb6d28466fdf4cf8db511d3ac95eba6da6d9e3db204bd32fd1fbdf957c2f6e4fa95ec664334f8e986588e89de71c66e0d53e1ad50b620ede9b589d48243399987192c5da95d7bfc7dc534ebb252ede72d1fc6475f48e60fb40b14d76e6119e6271c2e190d00c1bd1b5fec9263dc2780829f1888a40c885adc3bc7b4cf0bc5c4b3c2a912869f2715f4a667e89b63f146f721f8c7f57d91e34ec114eaf07f6ec5bec8f48da49cc3e9f1a37c342aa4bf953c0d0b5a6aa9cd8bc560845397a6fd970d513d84ee6a4273c7f1669158671900c519be70c9e2c629e7ee5585c4a88b053fb51601a17f77ceb61aba17e09c66d908f39e5339afebb5790047d834bc54065295cb8bf2d1ee913d1cdc5f81fa2e7b3d64295cd621f97ac6cc52d9d03d3c5ddb99bec4714b2b3ca5eb31be50cab0537b3bf72f6f70b4c5fb6b3230ad7f7ec64a6245d91a3a1a65a062d6d15ca92f324132a33b12378adc371541b758df236313bf88d1da68d9391083dfddee9efdb9ac1e16e2766b0864b49acfd705a6f9c8605be67fd71eef5cd68a2661803607dbc113368bcb7a7622ead954735e65bd8dfbba8d561d74d82756ac25209d21ee528552b44ad5ef4e205f9d9712b1c306b30186b525cf2d00e60e25b81e923c9dd7b76212f597ba37465bb1c0b7c396c1e19504ef4d838231f14d23b7f1e5957d2ff15f3c9814c043995f20f1bdfc6e35342103767bad6ad9ff8194f2b916fa0b104d1dfec35cc01ded061f3dbd0ce300e778cfd03719efb661a6e0ef0d6f5095fc00dcbf4c2d2a66dcc9ff2b7e23d05d5a270534c725cfdfd65880ea53af25d82a4f464f409ac1b8ba337ab544bdeb15eee913b70a380607189248e8ed4d4486fed1b1fc3bd6989bd759cd7d379fe582f84e98845a166e548ebd4224ad48cb14061c41093635f70cd911605ea8a5b9d08ff4ed70dfe94777f3e81fc507c54c4debadc101ec9e04838d336a849382b608166fb46bc24b97ad697f4c2ffbeed8438953190e5a315887dc21d5da872a5801519961759895bfd02cecc3995b1bb4ddb8028ecbe4ca14657fb2620ea871545b3cf7e6ece034d8aa343ddc541b62bc0471412c5de0257bf69e6005e8895f149218618ba2ec2e9f33e5de6db1952425e4c501363f9919e0199d50fb65b4b6fa56d4b216dd61cba4f81df684160c1a89a9654dc6586e77108458d69f581e10042b2abf1ad241128952f6d710da363fec665253126f8d2b3281cee4e522b82a89a161978f766d8602d440c2", 0x1000}, {&(0x7f0000001e00)="015038fe3346c8f3cacb3350faef73d22cc7925e68611b23704f5cac3ce831ba52d5ec11c1982882167424ae0829d61ee7e8b060aa3693db55783d9311134873318070b4348596e22d53fb61044e2334a1e7a1a3e43a99e67821b45d6747375abe3233c264cfec40130be2bb064136f8c1d842d87290e4e958a33cbb2cd783abca60a7e08eab31c2d083f80ad1d4ee06de687005f7f7522d0d256105c419247bc6fdeb4a7b748039a765e58e979e25752ce5067acaf084c21c4bd167c008ed4b49342a4834efaff2210e3e583de8", 0xce}], 0x8, &(0x7f0000001f80)=[@ip_retopts={{0x50, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x9, [@rand_addr=0x4]}, @end, @rr={0x7, 0x17, 0x81, [@rand_addr=0x100, @local, @local, @remote, @broadcast]}, @ssrr={0x89, 0x1f, 0x5, [@local, @multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @dev={0xac, 0x14, 0x14, 0x19}]}]}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@cipso={0x86, 0x4a, 0xffff, [{0x6, 0xc, "f705f1e1a5b7a2b6e429"}, {0x2, 0xb, "1e8cb7f7f01724626d"}, {0x0, 0xc, "8e4ae859b478be4db9e0"}, {0x6, 0xd, "fc6b00b5edbde5ed70cedd"}, {0x2, 0x9, "148ec128b0d4ae"}, {0x5, 0x5, "49fb44"}, {0x6, 0x6, "eddb3170"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4b5}}], 0x110}}, {{&(0x7f00000020c0)={0x2, 0x4e20}, 0x10, &(0x7f00000033c0)=[{&(0x7f0000002100)="f00c15f87791d25130fa4029099d090996d54fd781cb83caceb15e9fa470212e20d0e3cacc437b359203a3cf7fc1fff8c6a46681cfef710cd551b883ac347604eaaa0ccd351555c6c7aaf10cff05d51561bd6469967fe4221488a98c5f9538b81bb8a848900ad52356fa233848c4f7265cd685fd4702772b290353272330b1fb78f8b440371fe1a001286bdb0dba16e89506ce930bec719c19a942ad04ce7e118714f86c48311121ed5d4b", 0xab}, {&(0x7f00000021c0)="ab0515acaa7884d2dda816fb29329214561f0110e11e3a3136aff08042b201a083c1d857c54aad3808f3b1ea30e4f46e6e262d4fd2fb2b6f42836f259d86d286aa9c2bdc9bd055dff1c67a3571c480c6d6fdb8edcaa439f269c912f95f81078ab25497312020da3297138829bc196ce21099ee7f2df3143df85b4d797bbf4685fecd60e3a067c3d6154f2398e10c3f85b9f74af3b28ce2d4b38a305117b66ff6b0eb84245172b3c4acf4ec3cd6d71379cfc5", 0xb2}, {&(0x7f0000002280)="af3bfd40ed1060d2deb6a7c927670ed9b686e948bd64697673f6142dbb6862afd60e4def3f85981c6f3c9c786fd9a6fae4b79035f66ee842abafecdc3a331f83b127329b458fabb20234a60cd5ed2aace54ae770ff2a9cfcaae2f2b61313036f541910a3c2eb39f32e2473b90dc2b7f50b28cb5828dcdf27aa75d7c5fb643ae0e3d6642ff90bd54d9eca7580159797c3c34ac1d0d1ce577e52fe91d4647cd92d1db30e831ac3e53627b23eabc36e87cb4f9e00b12eb9ef0eed432f3a87036ebaaa20a50d635c846dcadd5c7c8317716d09248464a9c753db4d", 0xd9}, {&(0x7f0000002380)="f93bdc3c1e533b2d161f007703fe02a5c049ce78478e64af522b", 0x1a}, {&(0x7f00000023c0)="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", 0x1000}], 0x5, &(0x7f0000003440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x20}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@noop, @generic={0x7, 0x7, "4c72daa892"}, @timestamp={0x44, 0x14, 0x3f, 0x0, 0x4, [{[@local], 0x5}, {[], 0xffffffff}, {[], 0x1}]}]}}}, @ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @multicast2, @empty}}}, @ip_retopts={{0x78, 0x0, 0x7, {[@rr={0x7, 0x7, 0x4, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @ssrr={0x89, 0x7, 0xe, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x24, 0x6, 0x2, 0x1, [{[], 0xffff}, {[], 0x4}, {[@local], 0x1}, {[@rand_addr=0x4000000], 0xe4a}, {[@rand_addr=0x3941], 0x76}]}, @ra={0x94, 0x6, 0x3ff}, @ssrr={0x89, 0x1f, 0x7, [@remote, @remote, @empty, @broadcast, @rand_addr=0x7ff, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1]}, @generic={0x44, 0x7, "bcc0c72168"}, @rr={0x7, 0x7, 0x3, [@loopback]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x28000000}}], 0x120}}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003580)="5127f6afb9cc1e9801a3e1fae281da545ae9662c3db869f0c2fe4a9945dc5e3ad8f609ef128def10c6d691f7bba85e6eeb8e50216371a9dcc8ccc946064c8b070c37da69eafbebbbaa3879de91de107c0f7df673623a637d54f2fc718b254ff917727678c75b638b3e5f6cc2e027b9744ca0768fbb1801d59cec93cd0e4b037985b14f74c84afe6cbf1ee79a9af54ef82a0cf3aa74630a174647bf76cd2cb5fa4cc4ec7fe5f5c8fa2708fb27adcc4a97713c6864bd486a489411eaa87985ce432d618efd690c54be3b8943fa50354fdb1e6fa91a94a838154beb4bfb816f", 0xde}, {&(0x7f0000003680)="6fbb9b1b3844f1237fdadac8bdfb02aaf8e377ac507cb5c53dddb93f9e7e38ba442e8bcbc4df2b3cf6d8940f797748145b025cdc6e125ca629c63be063460709d5a72d0ed349281e5b738390033adc0fcbfd8b008be531805d7219f651293c5981809353e8b28c80ff161e43c5d6145f99d3bd907f6cb65a0480cbf0d6d064adc6dd47a0024ff08a516b260bf4753d17c1bbbbd5fda082e3082ff0fe89", 0x9d}, {&(0x7f0000003740)="8dc14d3865b400af8b1161c2518bdbb3cb6289ff199bc14036076d48a34dc5653459da27682cecffca926de8e2f47d37ac844da9cdf45a82df73fca7d04bf6efb488b491dacd17ca5dae2c5d723c5c34e899df66a6eeceb668e7ffd2614930741287b398e0146dc143b4", 0x6a}], 0x3, &(0x7f0000003840)=[@ip_retopts={{0xb0, 0x0, 0x7, {[@rr={0x7, 0xf, 0xab, [@local, @broadcast, @dev={0xac, 0x14, 0x14, 0x24}]}, @ssrr={0x89, 0xf, 0x2, [@broadcast, @remote, @rand_addr=0x4]}, @ssrr={0x89, 0x27, 0x3, [@empty, @loopback, @multicast1, @broadcast, @loopback, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x24}, @local]}, @ssrr={0x89, 0x7, 0xb3, [@rand_addr=0x8]}, @noop, @cipso={0x86, 0x51, 0xfff, [{0x2, 0xf, "68967f0fcd05ebc179bfcc6df7"}, {0x94e26822ba7e0ff3, 0xf, "d8df4ca3273b56488d8aae176d"}, {0x0, 0xe, "2a4e13f21aff0af211efd5eb"}, {0x2, 0x6, "00eb985c"}, {0x6, 0x5, "e1417d"}, {0x5, 0x5, "98138d"}, {0x1, 0xf, "b915994c59205d435ca7bb148a"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7aec}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r16, @local, @rand_addr=0xfffffff9}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x160}}], 0x4, 0x20000000) [ 1743.866360] hid-generic 0000:0000:0000.00DE: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:04 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xe0, @remote}}}, 0x80) [ 1745.308014] Bluetooth: hci0: command 0x1003 tx timeout [ 1745.313400] Bluetooth: hci0: sending frame failed (-49) [ 1747.388080] Bluetooth: hci0: command 0x1001 tx timeout [ 1747.393496] Bluetooth: hci0: sending frame failed (-49) [ 1749.467847] Bluetooth: hci0: command 0x1009 tx timeout 16:53:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(r0) 16:53:14 executing program 3: sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x97615}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:53:14 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x1800, @remote}}}, 0x80) 16:53:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x2) close(r4) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x101003, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:53:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x0], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) [ 1753.612053] hid-generic 0000:0000:0000.00DF: ignoring exceeding usage max [ 1753.638195] hid-generic 0000:0000:0000.00DF: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:14 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3f00, @remote}}}, 0x80) 16:53:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x100000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:53:14 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xe000, @remote}}}, 0x80) 16:53:14 executing program 3: sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe3461"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(r0) [ 1753.886643] hid-generic 0000:0000:0000.00E0: ignoring exceeding usage max [ 1753.962874] hid-generic 0000:0000:0000.00E0: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:14 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 16:53:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(r0) 16:53:14 executing program 3: sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1754.236517] hid-generic 0000:0000:0000.00E1: ignoring exceeding usage max 16:53:14 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x4}}, 0x80) [ 1754.301058] hid-generic 0000:0000:0000.00E1: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(r0) 16:53:15 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000240)={0xee, &(0x7f0000002440)=""/238}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000100)={'broute\x00'}, &(0x7f0000000180)=0x78) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f00000003c0)={0x0, 0x0, 0x2080}) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:53:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x0], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:53:15 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x18}}, 0x80) [ 1754.600459] hid-generic 0000:0000:0000.00E2: ignoring exceeding usage max [ 1754.634842] hid-generic 0000:0000:0000.00E2: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(r0) 16:53:15 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x400000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1754.821928] hid-generic 0000:0000:0000.00E3: ignoring exceeding usage max 16:53:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(r0) [ 1754.864276] hid-generic 0000:0000:0000.00E3: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:15 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0xe0}}, 0x80) 16:53:15 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1755.112112] hid-generic 0000:0000:0000.00E4: ignoring exceeding usage max [ 1755.122755] hid-generic 0000:0000:0000.00E4: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(r0) 16:53:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x6b6b6b}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:53:15 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1755.326094] hid-generic 0000:0000:0000.00E5: ignoring exceeding usage max 16:53:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f0000000100)={0x7b, "ce90d3bbaa48a3e557265e4f1435373781bcaf32dec35fb93c4434aece875ee6af4d831a49b59156e6693179341ed0902c96df16fe0ee9cef4f950e48bc8d85ecce48a622f2a161f984885c26c70ee645a64c8d9cdfecee7eccefc5b7e732831ff8db41d3562680fd573c7eb5c9f6291dcaae3ee1ff57e5b83665fe3229f56b3"}) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) [ 1755.377855] hid-generic 0000:0000:0000.00E5: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x0], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:53:16 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2a0}}, 0x80) 16:53:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(r0) 16:53:16 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8000a0}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:53:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(r0) 16:53:16 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x1800}}, 0x80) [ 1755.664160] hid-generic 0000:0000:0000.00E6: ignoring exceeding usage max [ 1755.742617] hid-generic 0000:0000:0000.00E6: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:16 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:16 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x3f00}}, 0x80) 16:53:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8001a0}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:53:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(r0) [ 1755.990159] hid-generic 0000:0000:0000.00E7: ignoring exceeding usage max [ 1756.032414] hid-generic 0000:0000:0000.00E7: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_ACTIVATE(r2, 0x5606, 0xebaa) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x2, 0x2, 0x73) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r3, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r3, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:53:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, 0x0) 16:53:16 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0xe000}}, 0x80) 16:53:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(r0) 16:53:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x80ffff}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1756.309272] hid-generic 0000:0000:0000.00E8: ignoring exceeding usage max [ 1756.319927] hid-generic 0000:0000:0000.00E8: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:17 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x1000000}}, 0x80) 16:53:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(r0) 16:53:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:53:17 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x4000000}}, 0x80) [ 1756.572599] hid-generic 0000:0000:0000.00E9: ignoring exceeding usage max [ 1756.606299] hid-generic 0000:0000:0000.00E9: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) close(r0) 16:53:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000100)=@req3={0x80000001, 0x5, 0x5, 0x7f, 0x5, 0xffff80a1, 0xffff}, 0x1c) r4 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000006000/0x1000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:53:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, 0x0) 16:53:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:53:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:17 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x18000000}}, 0x80) 16:53:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) close(r0) [ 1757.147828] protocol 88fb is buggy, dev hsr_slave_0 [ 1757.152973] protocol 88fb is buggy, dev hsr_slave_1 16:53:17 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x3f000000}}, 0x80) [ 1757.225798] hid-generic 0000:0000:0000.00EA: ignoring exceeding usage max [ 1757.233024] protocol 88fb is buggy, dev hsr_slave_0 [ 1757.233088] protocol 88fb is buggy, dev hsr_slave_1 [ 1757.294580] hid-generic 0000:0000:0000.00EA: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) close(r0) 16:53:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:53:18 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0xa0020000}}, 0x80) [ 1757.532128] hid-generic 0000:0000:0000.00EB: ignoring exceeding usage max 16:53:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) [ 1757.605472] hid-generic 0000:0000:0000.00EB: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:18 executing program 2: r0 = socket(0x8, 0x2, 0x49) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000002c00)={'security\x00', 0x2, [{}, {}]}, 0x48) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001840)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000001880)={{0x3, 0x7f}, 'port1\x00', 0x2, 0x100000, 0x6b, 0xfffffffe, 0x5, 0x7, 0x7, 0x0, 0x2, 0x7fffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r2) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x2, 0x2, 0x73) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r3, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r3, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ac0)=[{{&(0x7f0000001940)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000001980)="570c29f584426543b748546bebb66868751d6b4082c42f9d158f088140a1b94e7a3f2a86958c803a3e6e63f74cb303c765c62f36dd0ef5b03401c1289287220d90688b566d122edd71aa49133611a054fd7b0829bce79b67409ba6f7061d9cf28fbab3f890babeb633236fce802502d7b2e6a88702b0f9", 0x77}, {&(0x7f0000001a00)="edac4206138b1d45eecb4f4df179adb88ff107e4e09b68e5c439258da9f3172af0cd4745398427c2157ed13ec2862558a79cf8b8d66b766eee39c49bf9f25fabe3a92a822fd1e41c384ea355a212a720a9c93f4a2c77", 0x56}], 0x2}}], 0x1, 0xc005) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f0000002c80)={0x0, 0x0, 0x2080}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) r8 = getpid() recvmsg$can_bcm(r5, &(0x7f0000000340)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/210, 0xd2}, {&(0x7f00000003c0)=""/210, 0xd2}, {&(0x7f00000004c0)=""/143, 0x8f}, {&(0x7f0000000580)=""/196, 0xc4}, {&(0x7f0000000680)=""/172, 0xac}, {&(0x7f0000000740)=""/65, 0x41}, {&(0x7f0000000280)=""/54, 0x36}], 0x7, &(0x7f0000000840)=""/4096, 0x1000}, 0x40) sched_setattr(r8, &(0x7f0000000040)={0xfffffffffffffcc3, 0x6, 0x1, 0x4}, 0xe6c768bac69c5370) getpgrp(r8) move_pages(r8, 0x1, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x101], 0x0, 0x0) [ 1757.856709] Bluetooth: hci0: Frame reassembly failed (-84) 16:53:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, 0x0) 16:53:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:53:18 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0xe0000000}}, 0x80) 16:53:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r5) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x5}, {0xfffffff9, 0x2}], r5}, 0x18, 0x4) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) [ 1758.142444] hid-generic 0000:0000:0000.00EC: ignoring exceeding usage max [ 1758.175498] hid-generic 0000:0000:0000.00EC: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:18 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0xfeffffff}}, 0x80) 16:53:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x5000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:53:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1758.512482] hid-generic 0000:0000:0000.00ED: ignoring exceeding usage max 16:53:19 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0xfffffffe}}, 0x80) [ 1758.593620] hid-generic 0000:0000:0000.00ED: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x6000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1759.868174] Bluetooth: hci0: command 0x1003 tx timeout [ 1759.873579] Bluetooth: hci0: sending frame failed (-49) [ 1761.947777] Bluetooth: hci0: command 0x1001 tx timeout [ 1761.953178] Bluetooth: hci0: sending frame failed (-49) [ 1764.027974] Bluetooth: hci0: command 0x1009 tx timeout 16:53:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) 16:53:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:28 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0xffffffff}}, 0x80) 16:53:28 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0405619, &(0x7f0000000200)={0x0, 0x0, "5ad733b763181114350fe62535252a5044b7782eed21ae04"}) 16:53:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:53:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) setsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000100)=0x2, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_int(r5, 0x0, 0x0, &(0x7f00000001c0)=0x80000000, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$NBD_DO_IT(r7, 0xab03) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) r8 = socket$inet6(0xa, 0x5, 0x6) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000140)={0x21, 0x1, 0x8, 0xfff9, 0x1ff}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x0, 0x0, 0xffffffff, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xa) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:53:29 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) [ 1768.362971] hid-generic 0000:0000:0000.00EE: ignoring exceeding usage max 16:53:29 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="23000000ed0307041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16", 0x2e}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a0007003500280014000000090005407f", 0x2d}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1768.414707] hid-generic 0000:0000:0000.00EE: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xa000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1768.475986] Bluetooth: hci0: Frame reassembly failed (-84) 16:53:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:29 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x4}}, 0x80) [ 1768.636461] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1768.666416] hid-generic 0000:0000:0000.00EF: ignoring exceeding usage max [ 1768.727839] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1768.741115] hid-generic 0000:0000:0000.00EF: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1768.769081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6933 comm=syz-executor.1 16:53:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe3461"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1768.899595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6933 comm=syz-executor.1 [ 1768.970455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6933 comm=syz-executor.1 [ 1768.985529] hid-generic 0000:0000:0000.00F0: ignoring exceeding usage max [ 1769.028056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6933 comm=syz-executor.1 [ 1769.066300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6933 comm=syz-executor.1 [ 1769.088457] hid-generic 0000:0000:0000.00F0: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1769.123106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6933 comm=syz-executor.1 [ 1769.149787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6933 comm=syz-executor.1 [ 1769.192853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6933 comm=syz-executor.1 [ 1769.211405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6933 comm=syz-executor.1 [ 1769.224405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6933 comm=syz-executor.1 [ 1770.507789] Bluetooth: hci0: command 0x1003 tx timeout [ 1770.513178] Bluetooth: hci0: sending frame failed (-49) [ 1772.587886] Bluetooth: hci0: command 0x1001 tx timeout [ 1772.593376] Bluetooth: hci0: sending frame failed (-49) [ 1774.667819] Bluetooth: hci0: command 0x1009 tx timeout 16:53:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) 16:53:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xf000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:53:39 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x18}}, 0x80) 16:53:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x81, 0x9, 0x3, 0x5}, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:53:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe3461"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:39 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x100082) memfd_create(0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) 16:53:39 executing program 1: r0 = shmget(0x3, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) [ 1778.558793] hid-generic 0000:0000:0000.00F1: ignoring exceeding usage max [ 1778.579891] hid-generic 0000:0000:0000.00F1: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f0000000280)='./file0\x00', 0x280, 0x0) dup3(r5, r6, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r7, &(0x7f0000000080)={0x1000002, 0x0, 0x0, 0x0, 0x0, "82b0cfc4336aa6771538be0633e8bd3410000000000000005616b17333ad88f7e4a258981e458e96afda2a87223ba7f4"}, 0x40) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x2, 0x1, 0x0, 0x0, 0x400000000}, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000300)={@mcast2}, 0x20) r9 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r8, r9, &(0x7f0000000240)=0x202, 0x4000000000dc) r10 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0), 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r10, 0x0, 0x70bd2a, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008004}, 0x40000) 16:53:39 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0xe0}}, 0x80) 16:53:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe3461"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1778.795180] hid-generic 0000:0000:0000.00F2: ignoring exceeding usage max 16:53:39 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x2a0}}, 0x80) 16:53:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x10000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1778.879697] hid-generic 0000:0000:0000.00F2: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1778.928611] dlm: plock device version mismatch: kernel (1.2.0), user (33554433.0.0) [ 1780.667889] Bluetooth: hci0: command 0x1003 tx timeout [ 1780.673263] Bluetooth: hci0: sending frame failed (-49) [ 1782.748159] Bluetooth: hci0: command 0x1001 tx timeout [ 1782.753564] Bluetooth: hci0: sending frame failed (-49) [ 1784.828007] Bluetooth: hci0: command 0x1009 tx timeout 16:53:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(0xffffffffffffffff) 16:53:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:49 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x1800}}, 0x80) 16:53:49 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) 16:53:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x15760900}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:53:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000100)=ANY=[@ANYBLOB="700000001f006dfe3e969afd0960e72e80b3bdee5d8a407e3741576657235a4bf0e89d7826c29ebf16ceaa76aacabc58e24eac34fbef6aedecc6dbedb519aea48413045d351bdf154bf80a82ef602d0dfea945d9b48d3c020f3ec10ee4d8cac3d5844901"]) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000180), 0x10) [ 1788.790090] hid-generic 0000:0000:0000.00F3: ignoring exceeding usage max 16:53:49 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x3f00}}, 0x80) [ 1788.858862] hid-generic 0000:0000:0000.00F3: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe3461"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, 0x0) 16:53:49 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0xe000}}, 0x80) 16:53:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x18000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1789.053445] hid-generic 0000:0000:0000.00F4: ignoring exceeding usage max [ 1789.093970] hid-generic 0000:0000:0000.00F4: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1789.304547] hid-generic 0000:0000:0000.00F5: ignoring exceeding usage max [ 1789.343736] hid-generic 0000:0000:0000.00F5: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1790.907840] Bluetooth: hci0: command 0x1003 tx timeout [ 1790.913264] Bluetooth: hci0: sending frame failed (-49) [ 1792.987811] Bluetooth: hci0: command 0x1001 tx timeout [ 1792.993305] Bluetooth: hci0: sending frame failed (-49) [ 1795.067799] Bluetooth: hci0: command 0x1009 tx timeout 16:53:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(0xffffffffffffffff) 16:53:59 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x1000000}}, 0x80) 16:53:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x18100000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:53:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000100)=0x3) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:53:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) 16:53:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe3461"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1799.079341] hid-generic 0000:0000:0000.00F6: ignoring exceeding usage max 16:53:59 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x4000000}}, 0x80) [ 1799.122815] hid-generic 0000:0000:0000.00F6: hidraw0: HID v0.00 Device [syz1] on sz1 16:53:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1dca0500}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:53:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:53:59 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x18000000}}, 0x80) 16:54:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:54:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe3461"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1801.147812] Bluetooth: hci0: command 0x1003 tx timeout [ 1801.153224] Bluetooth: hci0: sending frame failed (-49) [ 1803.227945] Bluetooth: hci0: command 0x1001 tx timeout [ 1803.233413] Bluetooth: hci0: sending frame failed (-49) [ 1805.308160] Bluetooth: hci0: command 0x1009 tx timeout 16:54:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(0xffffffffffffffff) 16:54:09 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x3f000000}}, 0x80) 16:54:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x20000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:54:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:54:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0xfffffffffffffdbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x5, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r4) r7 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000140)={0xf0f041}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r8, &(0x7f000000f000/0x18000)=nil, 0x0, 0xffffff1c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:54:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:54:09 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0xa0020000}}, 0x80) [ 1809.341534] vivid-004: disconnect 16:54:10 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0xe0000000}}, 0x80) 16:54:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x32000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:54:10 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0xfeffffff}}, 0x80) 16:54:10 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0xfffffffe}}, 0x80) 16:54:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3c000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1811.397719] Bluetooth: hci0: command 0x1003 tx timeout [ 1811.404343] Bluetooth: hci0: sending frame failed (-49) [ 1813.467967] Bluetooth: hci0: command 0x1001 tx timeout [ 1813.473380] Bluetooth: hci0: sending frame failed (-49) [ 1815.547751] Bluetooth: hci0: command 0x1009 tx timeout 16:54:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:54:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) close(r0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000180), 0x0) close(0xffffffffffffffff) openat$userio(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x400000007f, 0x3ff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x26, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\a\x00\x00', @ANYRES32=r2, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x20020000) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x1fffff) 16:54:20 executing program 1 (fault-call:10 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, 0x0) 16:54:20 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0xffffffff}}, 0x80) 16:54:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x141}, 0x0, 0x0, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0xe8, 0xf, 0x9, "98a07379e31db23e300dbafbf95e4ec3", "c6a34a4e996793e42da95b3c2605e03b5d258ab6a2c72c5601cf6f0790166758c4b7078b783e75c498c7a4963002b96ffb0225ebdeaf19d3dda3c89bfc1c13d5a5ced232524661c72223efae2076c312bb582ccd000a9573c01904d77d1a442a41d16b68cde69650b24885af97bfdcab1486bf02bfc48f130237d39ce082b6e267f3b3b52db3064f4e2117640f37728fec26f2ddd10cd5b4dd0fa8c3d64a5a4db5282f8c45292e90dee9849a6e9bc88dd36cdf38b0ce416313672330ed549ebf4ebec6526199cfbc108db41f25e2f269d7b1db"}, 0xe8, 0x2) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:54:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1819.552941] FAULT_INJECTION: forcing a failure. [ 1819.552941] name failslab, interval 1, probability 0, space 0, times 0 [ 1819.601783] CPU: 1 PID: 7167 Comm: syz-executor.1 Not tainted 4.19.84 #0 [ 1819.608683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1819.618043] Call Trace: [ 1819.620644] dump_stack+0x197/0x210 [ 1819.624386] should_fail.cold+0xa/0x1b [ 1819.628287] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1819.633402] ? lock_downgrade+0x880/0x880 [ 1819.637564] __should_failslab+0x121/0x190 [ 1819.641806] should_failslab+0x9/0x14 [ 1819.645607] kmem_cache_alloc_node+0x26c/0x710 [ 1819.650201] ? retint_kernel+0x2d/0x2d [ 1819.654111] __alloc_skb+0xd5/0x5f0 [ 1819.657746] ? skb_scrub_packet+0x490/0x490 [ 1819.662069] ? lock_sock_nested+0x9a/0x120 [ 1819.666305] ? trace_hardirqs_on+0x67/0x220 [ 1819.670633] ? lock_sock_nested+0x9a/0x120 [ 1819.674878] sock_wmalloc+0xd9/0x120 [ 1819.678596] l2tp_ip_sendmsg+0x17f/0x1430 [ 1819.682762] inet_sendmsg+0x141/0x5d0 [ 1819.686567] ? ipip_gro_receive+0x100/0x100 [ 1819.690893] sock_sendmsg+0xd7/0x130 [ 1819.694627] ___sys_sendmsg+0x3e2/0x920 [ 1819.698626] ? copy_msghdr_from_user+0x430/0x430 [ 1819.703400] ? lock_downgrade+0x880/0x880 [ 1819.707555] ? kasan_check_read+0x11/0x20 [ 1819.711709] ? __fget+0x367/0x540 [ 1819.715167] ? iterate_fd+0x360/0x360 [ 1819.718982] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1819.724523] ? proc_fail_nth_write+0x9d/0x1e0 [ 1819.729030] ? __fget_light+0x1a9/0x230 [ 1819.733008] ? __fdget+0x1b/0x20 [ 1819.736381] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1819.741925] ? sockfd_lookup_light+0xcb/0x180 [ 1819.746427] __sys_sendmmsg+0x1bf/0x4e0 [ 1819.750414] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1819.754751] ? kasan_check_write+0x14/0x20 [ 1819.759005] ? __sb_end_write+0xd9/0x110 [ 1819.763074] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1819.768611] ? fput+0x128/0x1a0 [ 1819.771894] ? ksys_write+0x1f1/0x2d0 [ 1819.775701] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1819.780460] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1819.785218] ? do_syscall_64+0x26/0x620 [ 1819.789199] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1819.794568] ? do_syscall_64+0x26/0x620 [ 1819.798550] __x64_sys_sendmmsg+0x9d/0x100 [ 1819.802793] do_syscall_64+0xfd/0x620 [ 1819.806599] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1819.811789] RIP: 0033:0x45a639 [ 1819.814982] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1819.833883] RSP: 002b:00007f86cb6c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1819.841594] RAX: ffffffffffffffda RBX: 00007f86cb6c1c90 RCX: 000000000045a639 16:54:20 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) [ 1819.848864] RDX: 0000000000000553 RSI: 0000000020001540 RDI: 0000000000000003 [ 1819.856132] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1819.863399] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86cb6c26d4 [ 1819.870665] R13: 00000000004c83c8 R14: 00000000004de808 R15: 0000000000000006 16:54:20 executing program 1 (fault-call:10 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, 0x0) [ 1819.982058] FAULT_INJECTION: forcing a failure. [ 1819.982058] name failslab, interval 1, probability 0, space 0, times 0 [ 1819.994638] CPU: 0 PID: 7188 Comm: syz-executor.1 Not tainted 4.19.84 #0 [ 1820.001509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1820.010868] Call Trace: [ 1820.013471] dump_stack+0x197/0x210 [ 1820.017117] should_fail.cold+0xa/0x1b [ 1820.021020] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1820.026151] __should_failslab+0x121/0x190 [ 1820.030399] should_failslab+0x9/0x14 [ 1820.034210] kmem_cache_alloc_node_trace+0x274/0x720 [ 1820.039324] ? __alloc_skb+0xd5/0x5f0 [ 1820.043140] __kmalloc_node_track_caller+0x3d/0x80 [ 1820.048080] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1820.052757] __alloc_skb+0x10b/0x5f0 [ 1820.056478] ? skb_scrub_packet+0x490/0x490 [ 1820.060804] ? retint_kernel+0x2d/0x2d [ 1820.064717] sock_wmalloc+0xd9/0x120 [ 1820.068440] l2tp_ip_sendmsg+0x17f/0x1430 [ 1820.072607] inet_sendmsg+0x141/0x5d0 [ 1820.076422] ? ipip_gro_receive+0x100/0x100 [ 1820.080754] sock_sendmsg+0xd7/0x130 [ 1820.084479] ___sys_sendmsg+0x3e2/0x920 [ 1820.088466] ? copy_msghdr_from_user+0x430/0x430 [ 1820.093246] ? lock_downgrade+0x880/0x880 [ 1820.097408] ? kasan_check_read+0x11/0x20 [ 1820.101569] ? __fget+0x367/0x540 [ 1820.105038] ? iterate_fd+0x360/0x360 [ 1820.108846] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1820.114390] ? proc_fail_nth_write+0x9d/0x1e0 [ 1820.118902] ? __fget_light+0x1a9/0x230 [ 1820.122890] ? __fdget+0x1b/0x20 [ 1820.126269] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1820.131815] ? sockfd_lookup_light+0xcb/0x180 [ 1820.136326] __sys_sendmmsg+0x1bf/0x4e0 [ 1820.140317] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1820.144653] ? kasan_check_write+0x14/0x20 [ 1820.148916] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1820.154460] ? fput+0x128/0x1a0 [ 1820.157750] ? ksys_write+0x1f1/0x2d0 [ 1820.161566] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1820.166333] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1820.171101] ? do_syscall_64+0x26/0x620 [ 1820.175085] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1820.180457] ? do_syscall_64+0x26/0x620 [ 1820.184451] __x64_sys_sendmmsg+0x9d/0x100 [ 1820.188699] do_syscall_64+0xfd/0x620 [ 1820.192519] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1820.197716] RIP: 0033:0x45a639 [ 1820.200915] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1820.219820] RSP: 002b:00007f86cb6c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 16:54:20 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x20) 16:54:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x40000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:54:20 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x0, 0x4}}, 0x80) 16:54:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x1b1, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0) syz_genetlink_get_family_id$tipc(0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x933, 0x5, [0xeb9, 0x0, 0x0, 0x3, 0x0]}, &(0x7f0000000240)=0x12) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) close(r0) [ 1820.227539] RAX: ffffffffffffffda RBX: 00007f86cb6c1c90 RCX: 000000000045a639 [ 1820.234820] RDX: 0000000000000553 RSI: 0000000020001540 RDI: 0000000000000003 [ 1820.242095] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1820.249363] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86cb6c26d4 [ 1820.249373] R13: 00000000004c83c8 R14: 00000000004de808 R15: 0000000000000006 16:54:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:54:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xab88d27d24313074}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r4, 0x410, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x37]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000000) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:54:21 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x0, 0x18}}, 0x80) 16:54:21 executing program 0: clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x29) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x48000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:54:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}, 0x1}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x29, 0x5, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_misc(r6, &(0x7f00000003c0)={'syz0', "70a348b3a24dc6a7b17b8b077abef905b894110efc0ceb8e0076881831f3fc6d8c543da5a15b7f1f82138ec760b1b8c7dfdfad62df72799315d3571cae6f189c496fd89170b0e02ba39dc574f52a61aabcaaf4904b726fb864d89433d96c3177e1d165ee054bdd9ad6d18d137d0cea52024a0b0240f6ef24d7686f779418b56a17b45638a52a538aa34459b6dbee6cc01a8c47bcfd34de85059899192471fa0ced38bbe42c763a5a6b6df7b123b81b717b3c34de68d66b5a851aa4e69884f7d89c5a"}, 0xc6) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xc2e2, 0x1, [0x80]}, &(0x7f0000000140)=0xa) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000180)={r8, 0x7d, "99463d9d5f5fd14148a899c1ee2bc97ca0b825d9f2b4bf1cc54fc4f7f8f17165e8593a4a39fdee20d2d6d02e31a9c5daa1af2a9f15ec6cb69b5c0e00b800e8e6f27ea0a2401978541c2090dee901a3783f427ad436614d2615d59f3731c987a3a1874501b734301895e386a3b2b8cdbac149e3045618dcde976fdee9e0"}, &(0x7f0000000240)=0x85) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000340)) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:54:21 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x0, 0xe0}}, 0x80) 16:54:21 executing program 1 (fault-call:10 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, 0x0) 16:54:21 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = gettid() write$cgroup_pid(r0, &(0x7f0000000000)=r1, 0x12) 16:54:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4c000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:54:21 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x0, 0x2a0}}, 0x80) 16:54:21 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$kcm(0x2b, 0x8000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x3600000000000000, 0x15, 0x3af, &(0x7f0000000280)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522d545fe2687c2c84e7e277dbeec093d28e628e0deeb87dfb97e2cf537f8a290ef8dfd470f07d7f7e18902313db58fceda21", 0x0, 0x400, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 1820.884119] FAULT_INJECTION: forcing a failure. [ 1820.884119] name failslab, interval 1, probability 0, space 0, times 0 [ 1820.948539] CPU: 1 PID: 7251 Comm: syz-executor.1 Not tainted 4.19.84 #0 [ 1820.955448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1820.964808] Call Trace: [ 1820.967414] dump_stack+0x197/0x210 [ 1820.971062] should_fail.cold+0xa/0x1b [ 1820.971083] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1820.971108] ? lock_downgrade+0x880/0x880 [ 1820.980189] __should_failslab+0x121/0x190 [ 1820.980207] should_failslab+0x9/0x14 [ 1820.980220] kmem_cache_alloc_node+0x26c/0x710 [ 1820.980246] __alloc_skb+0xd5/0x5f0 [ 1820.980259] ? skb_scrub_packet+0x490/0x490 [ 1820.980272] ? lock_sock_nested+0x9a/0x120 [ 1820.980286] ? trace_hardirqs_on+0x67/0x220 [ 1820.980298] ? lock_sock_nested+0x9a/0x120 [ 1820.980317] sock_wmalloc+0xd9/0x120 [ 1821.021431] l2tp_ip_sendmsg+0x17f/0x1430 [ 1821.025958] inet_sendmsg+0x141/0x5d0 [ 1821.029794] ? ipip_gro_receive+0x100/0x100 [ 1821.034129] sock_sendmsg+0xd7/0x130 [ 1821.037857] ___sys_sendmsg+0x3e2/0x920 [ 1821.041844] ? copy_msghdr_from_user+0x430/0x430 [ 1821.046621] ? mark_held_locks+0x100/0x100 [ 1821.050890] ? kasan_check_read+0x11/0x20 [ 1821.055063] ? __might_fault+0x12b/0x1e0 [ 1821.055082] ? find_held_lock+0x35/0x130 [ 1821.063190] ? __might_fault+0x12b/0x1e0 [ 1821.067282] __sys_sendmmsg+0x1bf/0x4e0 [ 1821.071274] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1821.075608] ? kasan_check_write+0x14/0x20 [ 1821.075637] ? __sb_end_write+0xd9/0x110 [ 1821.075658] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1821.075670] ? fput+0x128/0x1a0 [ 1821.075686] ? ksys_write+0x1f1/0x2d0 [ 1821.096548] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1821.101319] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1821.106082] ? do_syscall_64+0x26/0x620 [ 1821.110072] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1821.115446] ? do_syscall_64+0x26/0x620 [ 1821.119432] __x64_sys_sendmmsg+0x9d/0x100 [ 1821.123683] do_syscall_64+0xfd/0x620 [ 1821.127492] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1821.132682] RIP: 0033:0x45a639 16:54:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dca0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd8735690f4786fc5166b0300000000000000000000000000000017a1f84c7404fe3461"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:54:21 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x0, 0x1800}}, 0x80) 16:54:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x61000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1821.135883] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1821.154787] RSP: 002b:00007f86cb6c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1821.162501] RAX: ffffffffffffffda RBX: 00007f86cb6c1c90 RCX: 000000000045a639 [ 1821.169779] RDX: 0000000000000553 RSI: 0000000020001540 RDI: 0000000000000003 [ 1821.177059] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1821.184334] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86cb6c26d4 [ 1821.191612] R13: 00000000004c83c8 R14: 00000000004de808 R15: 0000000000000006 16:54:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, r5, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:54:21 executing program 0 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(r0) [ 1821.271158] hid-generic 0000:0000:0000.00F7: ignoring exceeding usage max 16:54:22 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x0, 0x3f00}}, 0x80) [ 1821.336830] hid-generic 0000:0000:0000.00F7: hidraw0: HID v0.00 Device [syz1] on sz1 16:54:22 executing program 1 (fault-call:10 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, 0x0) 16:54:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:54:22 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x0, 0xe000}}, 0x80) 16:54:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x63000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1821.554124] hid-generic 0000:0000:0000.00F8: ignoring exceeding usage max [ 1821.583362] hid-generic 0000:0000:0000.00F8: hidraw0: HID v0.00 Device [syz1] on sz1 16:54:22 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x0, 0x1000000}}, 0x80) 16:54:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) [ 1821.706267] FAULT_INJECTION: forcing a failure. [ 1821.706267] name failslab, interval 1, probability 0, space 0, times 0 [ 1821.723154] CPU: 1 PID: 7309 Comm: syz-executor.1 Not tainted 4.19.84 #0 [ 1821.730022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1821.739400] Call Trace: [ 1821.742014] dump_stack+0x197/0x210 [ 1821.745656] should_fail.cold+0xa/0x1b [ 1821.749554] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1821.754663] ? lock_downgrade+0x880/0x880 [ 1821.758825] __should_failslab+0x121/0x190 [ 1821.763065] should_failslab+0x9/0x14 [ 1821.766866] kmem_cache_alloc_node_trace+0x274/0x720 [ 1821.771974] ? __alloc_skb+0xd5/0x5f0 [ 1821.775783] __kmalloc_node_track_caller+0x3d/0x80 [ 1821.780719] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1821.785393] __alloc_skb+0x10b/0x5f0 [ 1821.789114] ? skb_scrub_packet+0x490/0x490 [ 1821.793438] ? lock_sock_nested+0x9a/0x120 [ 1821.797676] ? trace_hardirqs_on+0x67/0x220 [ 1821.801998] ? lock_sock_nested+0x9a/0x120 [ 1821.806255] sock_wmalloc+0xd9/0x120 [ 1821.810108] l2tp_ip_sendmsg+0x17f/0x1430 [ 1821.814283] inet_sendmsg+0x141/0x5d0 [ 1821.818092] ? ipip_gro_receive+0x100/0x100 [ 1821.822421] sock_sendmsg+0xd7/0x130 [ 1821.826139] ___sys_sendmsg+0x3e2/0x920 [ 1821.830120] ? copy_msghdr_from_user+0x430/0x430 [ 1821.834889] ? mark_held_locks+0x100/0x100 [ 1821.839131] ? kasan_check_read+0x11/0x20 [ 1821.843289] ? __might_fault+0x12b/0x1e0 [ 1821.847355] ? find_held_lock+0x35/0x130 [ 1821.851423] ? __might_fault+0x12b/0x1e0 [ 1821.855518] __sys_sendmmsg+0x1bf/0x4e0 [ 1821.859506] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1821.863837] ? kasan_check_write+0x14/0x20 [ 1821.868089] ? __f_unlock_pos+0x19/0x20 [ 1821.872073] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1821.877630] ? fput+0x128/0x1a0 [ 1821.880914] ? ksys_write+0x1f1/0x2d0 [ 1821.884724] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1821.889484] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1821.894241] ? do_syscall_64+0x26/0x620 [ 1821.898218] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1821.903598] ? do_syscall_64+0x26/0x620 [ 1821.907579] __x64_sys_sendmmsg+0x9d/0x100 [ 1821.911823] do_syscall_64+0xfd/0x620 [ 1821.915631] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1821.920821] RIP: 0033:0x45a639 [ 1821.924035] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1821.942938] RSP: 002b:00007f86cb6c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1821.950652] RAX: ffffffffffffffda RBX: 00007f86cb6c1c90 RCX: 000000000045a639 [ 1821.957920] RDX: 0000000000000553 RSI: 0000000020001540 RDI: 0000000000000003 [ 1821.965186] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1821.972453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86cb6c26d4 [ 1821.979724] R13: 00000000004c83c8 R14: 00000000004de808 R15: 0000000000000006 16:54:22 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x0, 0x4000000}}, 0x80) [ 1822.014389] hid-generic 0000:0000:0000.00F9: ignoring exceeding usage max 16:54:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x3, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:54:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x68000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1822.060016] hid-generic 0000:0000:0000.00F9: hidraw0: HID v0.00 Device [syz1] on sz1 16:54:22 executing program 1 (fault-call:10 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, 0x0) [ 1822.260062] FAULT_INJECTION: forcing a failure. [ 1822.260062] name failslab, interval 1, probability 0, space 0, times 0 [ 1822.296563] CPU: 0 PID: 7329 Comm: syz-executor.1 Not tainted 4.19.84 #0 [ 1822.303461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1822.312909] Call Trace: [ 1822.315510] dump_stack+0x197/0x210 [ 1822.319151] should_fail.cold+0xa/0x1b [ 1822.323048] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1822.328175] ? lock_downgrade+0x880/0x880 [ 1822.332336] __should_failslab+0x121/0x190 [ 1822.336573] should_failslab+0x9/0x14 [ 1822.340377] kmem_cache_alloc_node+0x26c/0x710 [ 1822.344969] __alloc_skb+0xd5/0x5f0 [ 1822.348600] ? skb_scrub_packet+0x490/0x490 [ 1822.352926] ? __local_bh_enable_ip+0x18e/0x270 [ 1822.357602] sock_wmalloc+0xd9/0x120 [ 1822.361319] l2tp_ip_sendmsg+0x17f/0x1430 [ 1822.365488] inet_sendmsg+0x141/0x5d0 [ 1822.369299] ? ipip_gro_receive+0x100/0x100 [ 1822.373621] sock_sendmsg+0xd7/0x130 [ 1822.377337] ___sys_sendmsg+0x3e2/0x920 [ 1822.381318] ? copy_msghdr_from_user+0x430/0x430 [ 1822.386086] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1822.390845] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1822.395604] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1822.400190] ? retint_kernel+0x2d/0x2d [ 1822.404081] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1822.409018] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1822.413785] ? retint_kernel+0x2d/0x2d [ 1822.417689] ? lock_is_held_type+0x17e/0x210 [ 1822.422113] __sys_sendmmsg+0x1bf/0x4e0 [ 1822.426113] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1822.430452] ? kasan_check_write+0x14/0x20 [ 1822.434704] ? __sb_end_write+0xd9/0x110 [ 1822.438776] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1822.444316] ? fput+0x128/0x1a0 [ 1822.447600] ? ksys_write+0x1f1/0x2d0 [ 1822.451410] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1822.456165] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1822.460926] ? do_syscall_64+0x26/0x620 [ 1822.464901] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1822.470266] ? do_syscall_64+0x26/0x620 [ 1822.474260] __x64_sys_sendmmsg+0x9d/0x100 [ 1822.478503] do_syscall_64+0xfd/0x620 [ 1822.482309] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1822.487498] RIP: 0033:0x45a639 [ 1822.490693] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1822.509603] RSP: 002b:00007f86cb6c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1822.517316] RAX: ffffffffffffffda RBX: 00007f86cb6c1c90 RCX: 000000000045a639 [ 1822.524584] RDX: 0000000000000553 RSI: 0000000020001540 RDI: 0000000000000003 [ 1822.531850] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1822.539119] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86cb6c26d4 [ 1822.546387] R13: 00000000004c83c8 R14: 00000000004de808 R15: 0000000000000006 [ 1823.467791] Bluetooth: hci0: command 0x1003 tx timeout [ 1823.473223] Bluetooth: hci0: sending frame failed (-49) [ 1825.547795] Bluetooth: hci0: command 0x1001 tx timeout [ 1825.553196] Bluetooth: hci0: sending frame failed (-49) [ 1827.627721] Bluetooth: hci0: command 0x1009 tx timeout [ 1831.628081] FAULT_INJECTION: forcing a failure. [ 1831.628081] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.650796] CPU: 1 PID: 7280 Comm: syz-executor.0 Not tainted 4.19.84 #0 [ 1831.657639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1831.667036] Call Trace: [ 1831.669629] dump_stack+0x197/0x210 [ 1831.673272] should_fail.cold+0xa/0x1b [ 1831.677159] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1831.682319] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1831.688092] ? __cancel_work_timer+0x313/0x520 [ 1831.692700] ? mutex_trylock+0x1e0/0x1e0 [ 1831.696771] __should_failslab+0x121/0x190 [ 1831.700992] should_failslab+0x9/0x14 [ 1831.704777] kmem_cache_alloc_node+0x56/0x710 [ 1831.709279] __alloc_skb+0xd5/0x5f0 [ 1831.712927] ? skb_scrub_packet+0x490/0x490 [ 1831.717314] ? lock_downgrade+0x880/0x880 [ 1831.721448] ? hci_dev_open+0x220/0x220 [ 1831.725467] hci_sock_dev_event+0xf3/0x580 [ 1831.729720] hci_unregister_dev+0x253/0x820 [ 1831.734089] hci_uart_tty_close+0x1fc/0x250 [ 1831.738410] ? hci_uart_close+0x50/0x50 [ 1831.742434] tty_ldisc_close.isra.0+0xaf/0xe0 [ 1831.746916] tty_ldisc_kill+0x4b/0xc0 [ 1831.750715] tty_ldisc_release+0xc6/0x280 [ 1831.754860] tty_release_struct+0x1b/0x50 [ 1831.758992] tty_release+0xbcb/0xe90 [ 1831.762694] ? put_tty_driver+0x20/0x20 [ 1831.766651] __fput+0x2dd/0x8b0 [ 1831.769944] ____fput+0x16/0x20 [ 1831.773226] task_work_run+0x145/0x1c0 [ 1831.777116] exit_to_usermode_loop+0x273/0x2c0 [ 1831.781697] do_syscall_64+0x53d/0x620 [ 1831.785572] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1831.790754] RIP: 0033:0x45a639 [ 1831.793941] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1831.812833] RSP: 002b:00007f691d007c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1831.820542] RAX: 0000000000000000 RBX: 00007f691d007c90 RCX: 000000000045a639 16:54:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) close(r0) 16:54:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:54:32 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x0, 0x18000000}}, 0x80) 16:54:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x69000000}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) 16:54:32 executing program 1 (fault-call:10 fault-nth:5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, 0x0) 16:54:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000100)={0x3000, 0x4000}) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) [ 1831.827802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1831.835073] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1831.842330] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f691d0086d4 [ 1831.849589] R13: 00000000004fb3b2 R14: 00000000004d3678 R15: 0000000000000004 [ 1831.932382] FAULT_INJECTION: forcing a failure. [ 1831.932382] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.952939] hid-generic 0000:0000:0000.00FA: ignoring exceeding usage max [ 1831.987610] CPU: 0 PID: 7346 Comm: syz-executor.1 Not tainted 4.19.84 #0 [ 1831.994506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1832.003861] Call Trace: [ 1832.003883] dump_stack+0x197/0x210 [ 1832.003911] should_fail.cold+0xa/0x1b [ 1832.003930] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1832.003948] ? __should_failslab+0x67/0x190 [ 1832.003968] __should_failslab+0x121/0x190 [ 1832.003986] should_failslab+0x9/0x14 [ 1832.003999] kmem_cache_alloc_node_trace+0x274/0x720 [ 1832.036862] ? __alloc_skb+0xd5/0x5f0 [ 1832.040678] __kmalloc_node_track_caller+0x3d/0x80 [ 1832.045614] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1832.050287] __alloc_skb+0x10b/0x5f0 [ 1832.054001] ? skb_scrub_packet+0x490/0x490 [ 1832.058325] ? lock_sock_nested+0x9a/0x120 [ 1832.062577] ? trace_hardirqs_on+0x67/0x220 [ 1832.066903] ? lock_sock_nested+0x9a/0x120 [ 1832.071149] sock_wmalloc+0xd9/0x120 [ 1832.074869] l2tp_ip_sendmsg+0x17f/0x1430 [ 1832.079030] inet_sendmsg+0x141/0x5d0 [ 1832.082832] ? ipip_gro_receive+0x100/0x100 [ 1832.087158] sock_sendmsg+0xd7/0x130 [ 1832.090874] ___sys_sendmsg+0x3e2/0x920 [ 1832.094854] ? copy_msghdr_from_user+0x430/0x430 [ 1832.099619] ? mark_held_locks+0x100/0x100 [ 1832.103859] ? kasan_check_read+0x11/0x20 [ 1832.108013] ? __might_fault+0x12b/0x1e0 [ 1832.112074] ? find_held_lock+0x35/0x130 [ 1832.116139] ? __might_fault+0x12b/0x1e0 [ 1832.120224] __sys_sendmmsg+0x1bf/0x4e0 [ 1832.124207] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1832.128534] ? kasan_check_write+0x14/0x20 [ 1832.132793] ? __sb_end_write+0xd9/0x110 [ 1832.136857] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1832.142395] ? fput+0x128/0x1a0 [ 1832.145674] ? ksys_write+0x1f1/0x2d0 [ 1832.149485] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1832.154244] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1832.158999] ? do_syscall_64+0x26/0x620 [ 1832.162977] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1832.168342] ? do_syscall_64+0x26/0x620 [ 1832.172321] __x64_sys_sendmmsg+0x9d/0x100 [ 1832.176573] do_syscall_64+0xfd/0x620 [ 1832.180480] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1832.185671] RIP: 0033:0x45a639 [ 1832.188864] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1832.207769] RSP: 002b:00007f86cb6c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1832.215489] RAX: ffffffffffffffda RBX: 00007f86cb6c1c90 RCX: 000000000045a639 [ 1832.222776] RDX: 0000000000000553 RSI: 0000000020001540 RDI: 0000000000000003 [ 1832.230054] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 16:54:32 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x0, 0x3f000000}}, 0x80) [ 1832.237324] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86cb6c26d4 [ 1832.244697] R13: 00000000004c83c8 R14: 00000000004de808 R15: 0000000000000006 [ 1832.261860] hid-generic 0000:0000:0000.00FA: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1832.263199] Bluetooth: Error in BCSP hdr checksum 16:54:32 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x0, 0xa0020000}}, 0x80) 16:54:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x20000, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000180)=""/75) getsockopt$ax25_int(r5, 0x101, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) 16:54:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f00000001c0)=""/77, 0x2000020d}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 16:54:33 executing program 1 (fault-call:10 fault-nth:6): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x141}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) sendmmsg(r1, &(0x7f0000001540), 0x553, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, 0x0) 16:54:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x6b6b6b00}, 0x48) msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 1832.468883] hid-generic 0000:0000:0000.00FB: ignoring exceeding usage max [ 1832.504780] hid-generic 0000:0000:0000.00FB: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1832.599618] FAULT_INJECTION: forcing a failure. [ 1832.599618] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.678686] CPU: 1 PID: 7385 Comm: syz-executor.1 Not tainted 4.19.84 #0 [ 1832.685605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1832.694966] Call Trace: [ 1832.697570] dump_stack+0x197/0x210 [ 1832.701221] should_fail.cold+0xa/0x1b [ 1832.705127] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1832.710247] ? lock_downgrade+0x880/0x880 [ 1832.714415] __should_failslab+0x121/0x190 [ 1832.718660] should_failslab+0x9/0x14 [ 1832.722469] kmem_cache_alloc_node+0x26c/0x710 [ 1832.727062] ? find_held_lock+0x35/0x130 [ 1832.731146] __alloc_skb+0xd5/0x5f0 [ 1832.734783] ? skb_scrub_packet+0x490/0x490 [ 1832.739114] ? lock_sock_nested+0x9a/0x120 [ 1832.743352] ? trace_hardirqs_on+0x67/0x220 [ 1832.747682] ? lock_sock_nested+0x9a/0x120 [ 1832.751928] sock_wmalloc+0xd9/0x120 [ 1832.755656] l2tp_ip_sendmsg+0x17f/0x1430 [ 1832.759822] inet_sendmsg+0x141/0x5d0 [ 1832.763632] ? ipip_gro_receive+0x100/0x100 [ 1832.767965] sock_sendmsg+0xd7/0x130 [ 1832.771687] ___sys_sendmsg+0x3e2/0x920 [ 1832.775675] ? copy_msghdr_from_user+0x430/0x430 [ 1832.780445] ? mark_held_locks+0x100/0x100 [ 1832.784691] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1832.789462] ? __might_fault+0x12b/0x1e0 [ 1832.793529] ? find_held_lock+0x35/0x130 [ 1832.797599] ? __might_fault+0x12b/0x1e0 [ 1832.801694] __sys_sendmmsg+0x1bf/0x4e0 [ 1832.805679] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1832.810010] ? kasan_check_write+0x14/0x20 [ 1832.814261] ? __sb_end_write+0xd9/0x110 [ 1832.818335] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1832.823876] ? fput+0x128/0x1a0 [ 1832.827166] ? ksys_write+0x1f1/0x2d0 [ 1832.830980] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1832.835744] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1832.840506] ? do_syscall_64+0x26/0x620 [ 1832.844487] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1832.849858] ? do_syscall_64+0x26/0x620 [ 1832.853851] __x64_sys_sendmmsg+0x9d/0x100 [ 1832.858100] do_syscall_64+0xfd/0x620 [ 1832.861914] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1832.867110] RIP: 0033:0x45a639 [ 1832.870311] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1832.889216] RSP: 002b:00007f86cb6c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1832.896939] RAX: ffffffffffffffda RBX: 00007f86cb6c1c90 RCX: 000000000045a639 [ 1832.904212] RDX: 0000000000000553 RSI: 0000000020001540 RDI: 0000000000000003 [ 1832.911842] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1832.919116] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86cb6c26d4 [ 1832.926387] R13: 00000000004c83c8 R14: 00000000004de808 R15: 0000000000000006 [ 1834.027820] Bluetooth: hci0: command 0x1003 tx timeout [ 1834.034906] Bluetooth: hci0: sending frame failed (-49) [ 1836.108174] Bluetooth: hci0: command 0x1001 tx timeout [ 1836.113591] Bluetooth: hci0: sending frame failed (-49) [ 1838.187867] Bluetooth: hci0: command 0x1009 tx timeout [ 1842.509713] ================================================================== [ 1842.517447] BUG: KASAN: use-after-free in kfree_skb+0x38/0x390 [ 1842.523435] Read of size 4 at addr ffff888031efa5e4 by task syz-executor.0/7352 [ 1842.530878] [ 1842.532538] CPU: 1 PID: 7352 Comm: syz-executor.0 Not tainted 4.19.84 #0 [ 1842.539382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1842.549520] Call Trace: [ 1842.552117] dump_stack+0x197/0x210 [ 1842.555734] ? kfree_skb+0x38/0x390 [ 1842.559362] print_address_description.cold+0x7c/0x20d [ 1842.564635] ? kfree_skb+0x38/0x390 [ 1842.568256] kasan_report.cold+0x8c/0x2ba [ 1842.572445] check_memory_region+0x123/0x190 [ 1842.576840] kasan_check_read+0x11/0x20 [ 1842.580811] kfree_skb+0x38/0x390 [ 1842.584264] bcsp_close+0xc7/0x130 [ 1842.587803] hci_uart_tty_close+0x1ea/0x250 [ 1842.592135] ? hci_uart_close+0x50/0x50 [ 1842.596122] tty_ldisc_close.isra.0+0xaf/0xe0 [ 1842.600631] tty_ldisc_kill+0x4b/0xc0 [ 1842.604440] tty_ldisc_release+0xc6/0x280 [ 1842.610431] tty_release_struct+0x1b/0x50 [ 1842.614588] tty_release+0xbcb/0xe90 [ 1842.618357] ? put_tty_driver+0x20/0x20 [ 1842.622334] __fput+0x2dd/0x8b0 [ 1842.625625] ____fput+0x16/0x20 [ 1842.628916] task_work_run+0x145/0x1c0 [ 1842.632834] exit_to_usermode_loop+0x273/0x2c0 [ 1842.637512] do_syscall_64+0x53d/0x620 [ 1842.641395] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1842.646612] RIP: 0033:0x45a639 [ 1842.649886] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1842.668791] RSP: 002b:00007f691d007c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1842.676593] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 000000000045a639 [ 1842.684039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1842.691314] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1842.698669] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f691d0086d4 [ 1842.705925] R13: 00000000004fb3b2 R14: 00000000004d3678 R15: 00000000ffffffff [ 1842.713191] [ 1842.714803] Allocated by task 7: [ 1842.718167] save_stack+0x45/0xd0 [ 1842.721618] kasan_kmalloc+0xce/0xf0 [ 1842.725332] kasan_slab_alloc+0xf/0x20 [ 1842.729210] kmem_cache_alloc_node+0x144/0x710 [ 1842.733787] __alloc_skb+0xd5/0x5f0 [ 1842.737397] bcsp_recv+0x8c7/0x13a0 [ 1842.741009] hci_uart_tty_receive+0x225/0x530 [ 1842.745504] tty_ldisc_receive_buf+0x15f/0x1c0 [ 1842.750082] tty_port_default_receive_buf+0x7d/0xb0 [ 1842.755114] flush_to_ldisc+0x222/0x390 [ 1842.759092] process_one_work+0x989/0x1750 [ 1842.763331] worker_thread+0x98/0xe40 [ 1842.767136] kthread+0x354/0x420 [ 1842.770499] ret_from_fork+0x24/0x30 [ 1842.774190] [ 1842.775813] Freed by task 7: [ 1842.778834] save_stack+0x45/0xd0 [ 1842.782290] __kasan_slab_free+0x102/0x150 [ 1842.786535] kasan_slab_free+0xe/0x10 [ 1842.790321] kmem_cache_free+0x86/0x260 [ 1842.794279] kfree_skbmem+0xcb/0x150 [ 1842.797983] kfree_skb+0xf0/0x390 [ 1842.801437] bcsp_recv+0x2d8/0x13a0 [ 1842.805054] hci_uart_tty_receive+0x225/0x530 [ 1842.809549] tty_ldisc_receive_buf+0x15f/0x1c0 [ 1842.814115] tty_port_default_receive_buf+0x7d/0xb0 [ 1842.819123] flush_to_ldisc+0x222/0x390 [ 1842.823102] process_one_work+0x989/0x1750 [ 1842.827328] worker_thread+0x98/0xe40 [ 1842.831122] kthread+0x354/0x420 [ 1842.834491] ret_from_fork+0x24/0x30 [ 1842.838199] [ 1842.839827] The buggy address belongs to the object at ffff888031efa500 [ 1842.839827] which belongs to the cache skbuff_head_cache of size 232 [ 1842.853112] The buggy address is located 228 bytes inside of [ 1842.853112] 232-byte region [ffff888031efa500, ffff888031efa5e8) [ 1842.864970] The buggy address belongs to the page: [ 1842.869887] page:ffffea0000c7be80 count:1 mapcount:0 mapping:ffff8880aa347ac0 index:0x0 [ 1842.878023] flags: 0x1fffc0000000100(slab) [ 1842.882267] raw: 01fffc0000000100 ffffea0002549788 ffffea0001110388 ffff8880aa347ac0 [ 1842.890144] raw: 0000000000000000 ffff888031efa000 000000010000000c 0000000000000000 [ 1842.898008] page dumped because: kasan: bad access detected [ 1842.903706] [ 1842.905315] Memory state around the buggy address: [ 1842.910236] ffff888031efa480: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 1842.918554] ffff888031efa500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1842.925913] >ffff888031efa580: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 1842.933264] ^ [ 1842.939748] ffff888031efa600: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1842.947102] ffff888031efa680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1842.954447] ================================================================== [ 1842.961800] Disabling lock debugging due to kernel taint [ 1842.968262] Kernel panic - not syncing: panic_on_warn set ... [ 1842.968262] [ 1842.975663] CPU: 1 PID: 7352 Comm: syz-executor.0 Tainted: G B 4.19.84 #0 [ 1842.984000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1842.993684] Call Trace: [ 1842.996259] dump_stack+0x197/0x210 [ 1842.999882] ? kfree_skb+0x38/0x390 [ 1843.003505] panic+0x26a/0x50e [ 1843.006679] ? __warn_printk+0xf3/0xf3 [ 1843.010550] ? kfree_skb+0x38/0x390 [ 1843.014162] ? preempt_schedule+0x4b/0x60 [ 1843.018308] ? ___preempt_schedule+0x16/0x18 [ 1843.022722] ? trace_hardirqs_on+0x5e/0x220 [ 1843.027137] ? kfree_skb+0x38/0x390 [ 1843.030754] kasan_end_report+0x47/0x4f [ 1843.034731] kasan_report.cold+0xa9/0x2ba [ 1843.038967] check_memory_region+0x123/0x190 [ 1843.043370] kasan_check_read+0x11/0x20 [ 1843.047329] kfree_skb+0x38/0x390 [ 1843.050770] bcsp_close+0xc7/0x130 [ 1843.054347] hci_uart_tty_close+0x1ea/0x250 [ 1843.058660] ? hci_uart_close+0x50/0x50 [ 1843.062676] tty_ldisc_close.isra.0+0xaf/0xe0 [ 1843.067156] tty_ldisc_kill+0x4b/0xc0 [ 1843.070947] tty_ldisc_release+0xc6/0x280 [ 1843.075078] tty_release_struct+0x1b/0x50 [ 1843.079222] tty_release+0xbcb/0xe90 [ 1843.082932] ? put_tty_driver+0x20/0x20 [ 1843.086890] __fput+0x2dd/0x8b0 [ 1843.090151] ____fput+0x16/0x20 [ 1843.093416] task_work_run+0x145/0x1c0 [ 1843.097288] exit_to_usermode_loop+0x273/0x2c0 [ 1843.101856] do_syscall_64+0x53d/0x620 [ 1843.105729] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1843.110898] RIP: 0033:0x45a639 [ 1843.114075] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1843.132959] RSP: 002b:00007f691d007c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1843.140650] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 000000000045a639 [ 1843.147901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1843.155152] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1843.162409] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f691d0086d4 [ 1843.169673] R13: 00000000004fb3b2 R14: 00000000004d3678 R15: 00000000ffffffff [ 1843.178463] Kernel Offset: disabled [ 1843.182089] Rebooting in 86400 seconds..