94dcbd1a19fc8a13913d7b87b9c34c1184554f36706b56fc1da63d42c8009085e87167ec88e400308d6a6272dda04fb7a9ddbddc6d52f9f5a8f4ba1426eaf0a852e9bf1e131decf5ee3d6e46ecab79e235c6536b53f735c9403949e161d3776fa8a3fcf7d997d786d35c7f78b680a043dacd48389e2d16a3b36d51ec7f6b43cfcbddc78381d6513365e2b83d2362ae647bf084674399d5e1063ba233ba3f85e6f9fec64679eb28bc56d5aaca34cfe00ace7445ffd44a33b8d3fce339e46022a48cbe9d2b562f7a54b6521ec95b83823ff4ebe8761c2bd9fc7cf95b9ef9438f16322ca4d04399ed308ffab19945cb3dbfa7c394669e44d182dc51cc58ae3c983f91b0cfe643632a9c86916d6b4d86a3c77e8edfb6bf9ff37fb854e12da51f7ef92de9b00e685339432cf0e3412eaa581d7bfa64c45bbf564a6c04e8add0cc2c79b3f3948fe5aa782d777ebb71b2017af735a8ed2ed9bf52804ee53d883a944975aedfb96b05ff5c374ba23996ff08957ea83b7287534fea0ec387ae65a7e9ce1f1e678218e6902af08ee9e84216e580d236fd0245daedfd6f3c814adb024d7cd8a36ff04c0d9fe734828a2f5be69826c35153ab4387377f60f71cf64298b06a9f07d000afedd64b4f2e331d9a6fdc0d4bf114cd4ce89ce45fe772d762d61264613ed2b54249349627d749f2dab35e9d2a25f8dc96b358f5b92f6b06a1d17acfc6a33518476fd824fe45f9600dc64503822bf43157d3ea3f50db6732f49955a2070451866b2cfce56196151d851621ce4a5adbbb7e7cef5a091ae1efaa0b083366b68648aa136fcec523d0f34ff65e19df8e72209df876c70eecafa52df6c8aa1fd3f2b3072b63c2e3bdba7cf74b76b5ddcafe0629d66cfb69dd88e501979f9e8df00027fb6b5370777935fa7c15f7a167fcdc33ef6bd095c3f5490e1f3d179dd3cbf60b2563c7e3dbacaad837768c3fa29f06db54334359277ddc7b912f5df7df675e5b84eb5ebe42cd6695bcd34904355c4018aeccf47a0eac801f8d05a39bd929c8985f1339c04a42afbffad57476d061b339f8dc2f259c63897dbd1a49359728ec3f4681dc054c8eda254b61c1758e4af934fc819390f8eb2933447de8e98030c91f97874e3ee5b2ea308e781b8596e2fcc7a28706e9626af1b416d8a547f0670fbc0f086a1fea03cc8b357538c7db2a4aecd6fef4e29b26f039918c8e9dab804e68740123134da04a1af2b49a9018aeb3a972a71ed38b48aee81206ca7fe3c77afc7e7d0fb0185ac0ca13abefad0a7854d473bab19dec7c51d3cb383271656b916c2989e40e0d32a0cab020a80ec37cb924e4e4b64822c0da2302cbcff1ee825861e1438f7aa4c9a7637a99c4cc901ad9d5aec4d55d71ca6bdc4da69168229cde58ff4ef7e4f8e894d236728685c2c63c1e733d00a90cdb9d8ab248425d2a4051ff4788c353a82682d55445410c96fad42fb67e014cfc69852cce0bdc507d5e4b9912c2dcd2bf2c08c393107b34eaa50e05f8346bae26688a4d06a0dc8cb479a84f00e71d3ec0ac5ddc676575cf6de933a66f67fe234f450a6e5ca0350f6b1042924cbf13e3289486fe0fe68010b9afc1a63c5e3073eeb4d33ea4485691946a352ed66f9c8079905633fe43c504cacf82e9795dd718cb0a4a7ad51bef466390b10ef7e37986c1cd6fa1da294211ffd78c2f549040f2eabce7deb178cac7e2c63fc04048b7aa05ed3dc17e8981adccdc8882485e4ef9582dbea8fb0a3842cca032c54102454cc6b7c4d7e24547f954fec0bdc4dfd4bbea41e6a40f4e006a41c8c151724b20dc45b7a3c4f13e77f4fc211bb6328ae1fac1849213f4b23d2073e546590b053c440a630f31f0070001bccd76ea66073cdb8f4f4b85d946ac445eb34d5d293204b5e0c61875128b27bcee77a3912b200cb9924a2a0af6b0ab0ce85a288a384b6d4aa2197a55d02e15b34a54553f13e0400cde51c7db6be8c0105172cf693d7a9d2626c8e561b6bfddfd849121d7a5dd590eeb6b447d0c938bc57bda7b81f1e36dc11c97857fe01dd3ca60ae7d87fdecc604bdb207012e68b6fda24e30002087a39e9324c7da835c08e366a66fa2676f1c32e2b4c55fd838f9656547d9070f580e674418e7c254eab742bb1174b67ff2a031b9288b901024b6ad54f65afa47b8ddd1fe8b0c96c4b75cd3e70aedb6462893539d2fdab690c130567744930cf9c20586c468f81cbdc98edd3b5dbae52de062be1e764f5cd8816f22ae9b2676295dfc35b4142181f86fcc7f1a8ac1b09a29db11818e40dabd64d8420d3076fb29ee83b4e0151f8e5037bd31f7bc89df08398869b427363851ac8e931195ed6801f0c30f38d7256afbe72dbab55f88c79d9918c38eb115ec12933c92672cd032bec31c19bb4937bbd28262f9bebf70dae9f006ad062705e220251d4edab330ca4701dffea944b006e7ae79709d73f47c6e60fb924366636c12e9edad5d9bc5461203ff85d348e8c3a39d4dc424e8315254d660c9618e83ccee34311ad37c106c99f98961ff28da65c95246a684e115bf8a98abc88ed659be1f8f7f4f9a26cb3dfefdc29930daf15930126f0d330fc6db5b48bb5db48311f316f60c4b8d7e230bf7632d3965d35e3192208ac4217f48eb560e09d677aab820d008ca1e37ebec440bbb0620c9354342193569c47328e6a9860be94539823914408d5831173e1594e4348d92dcc369363f61be3b509880537f3ecc425e846d0eb1a83b7c6df2aca1f9a25f0999a73628673a501b0a1ace0b62cb8cae63e5542e6c7d8f4b53d739b916574aa8c6807ce60035d867933fe254aa871ebe5061101bffb7becaf36cdd21f6fb87225b28d81a1bf0d7724e8f736b236b02daf117b5f5673f62b99e907a3335c2977d60f70e73dac1fe91b951041e596ffe3723f62a08ce805fe8f4c4e146373e273efd46a0ed1a2872d5e609c9329d1b30a55e063ac9922987d4451c06c62359afff76ac4566ddde48c76cf224a2fea794d661f1736e6648ddefba7c69909433dff86184317ce83cdcb1292592226c9f0ea340a3ebe403599bd1191625e06b8b92bdbe219ef6ddcf6a938ed223337556f2ac192c2041c7ae945cc6770eb9a17b7480567006556e7e1746072fb336dbd4b3e087ea71f39d4f8c5d5b7105e7f9e6706cc37363a46629af8707ddb631e2aec10ed00cc8de929ed8fa0d8097f4456d96578585dc0c031d62741a8c247acb1fbf15d37114eabd58833e9f2eb2323e3f84ce2428d38877ca3911691f7b64233c7fad9466d92e98f800d954fa1b4b20395ea77bd40d01b737f0fd5ce9314fb732c07aa550b2c3d6f7d5c071ab4fdb468c9103ee36d9de66dffdacbc766e6bac9423118e0a69339b0ee91c437d6ece9c8809940f3c573cc0acff52d0d02be4294ffc6edecb42510c577c76d7e45381203f384f8e31fd1bf67256cee0eff1713926e94730c014b5ecea0ae801a1de2a969280588f676db2625262b5dc1f6264b7bb51fc3b1ea0e66e389c5f31e363bef1e1f57d15db2c9b28f7140f76421a8bf3d33bb9ef0c87b431ce5ac6c51d72aa767041add24933083040ca29928dd4173311afe4dbe2848db44e89c066c72e1e2d1a1958bd19a97c250d638d495d2a24fdbaede8a378573ff607158cf8a2c891bb7de5363e115ce964715fa409474eb5d24ee7bf189bfffcc97602f45a3a0b284b3e551ba37d7aceb4ae6a144ff51663465967822b943c310dc9998c4d36b9943e440184088c8e43f599a0a27d479bc82e9acf3d8a294515bd1095f417b2266312507ee9b57fa85c797f3d62709126f09c50e48655b90b9f458e46abeaf7b614cad9166fe38626f28425a167ea3654dcc23b78e249f2c5c40b30322d3235b0069897b3b3707c9b89134ae9b584c415d05e00954620f1bf3fe4b4c82d15ac2286179680e9eb7df365739c51e9a8e840e7f1691c5ac9f28afaa6d4ad9090a1478582a7a20654e247e30bcb9480e02a0e09f2d0faa1333f0d36bbb16abf0e5f45141b7e27a15c171ccd59a58e1d6abee4bb408c8cc532f6efef783d7b5d34a13b942368966d34e4a8030a2bea2d708eb4c6480a54389cb868281737ed093302275492cb178bbaff2cb40b36eb02abc89adcd0ade1a5fad1bb173c0662f5ac8892bbf18d324"}) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000040), 0xffffffff) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r6, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 440.001366][T15059] input: syz0 as /devices/virtual/input/input1751 18:55:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f00000000c0)}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 440.081852][T15064] input: syz0 as /devices/virtual/input/input1752 18:55:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:24 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x400}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042d000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000006, 0x80010, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x16, 0x1}, 0x80000000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4c15, &(0x7f00000000c0)={0x0, 0xb85a, 0x1, 0x0, 0x99}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r9 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000840)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r5, 0x0, &(0x7f0000000800)={&(0x7f0000000400)=@isdn={0x22, 0x1, 0x73, 0x6c}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000480)="c39622eff0f0716a86fd7e59b0d0f9ed67b5cf416b0e127a5726727e3546bad7498eb17b05ba1c7ac1683598bb05d82b39fa61eae45d7a7b9359109df303", 0x3e}, {&(0x7f00000004c0)="63a54bff416fbe8939afdbf3755e5008598381a1c2abd69032b9ef9ef1d458ff145bd3a62417a8eb4d38eeb44bc307cdaac88b3db4ea33150737bdd9", 0x3c}, {&(0x7f0000000500)="67cbff3c9e4f04e37f79b4dbc7eeee6775e4ba61966c2510fc1ff2658c1c38f5e6245befb7c2c4cb7826a52df146040d6868c393a68bdfe4573098989a27cd4519737b2a80b45388db64dfe7976e50185d024ca1627fc7d0d224bf66543db649a8ef6f1257e4ed33ea062ada4c345aa83b48b054b012dc40865b000b4ef7bcab2a169c0ecee56aa50a59e96224cf16f9e4722356391e8844920f922d90007fb8468178d7671dcb7bc9141565ec6f90622f8c2d6970b44cbe9c304d403ce79a4b4d5ced16437264134ab4b47fcce0a0f1499ca7", 0xd3}, {&(0x7f0000000600)="eb0be9812d2b35b0ac17067645b23976310a1666e29bfb0cf005ab2662003d0862af8281c5b9bd73aa5949fd56", 0x2d}, {&(0x7f0000000640)="df474bcfb3b847775c442abb61d1dbfc8328945bd722e0ed42a8ef68b42f26c29fa57711092e2241da6ac5c249bca9875a866b0c0cd0c5db99aa60c0a8514a00d4c47026e05c6f9b789abd6d2d49dcdd1e0d6cdde02a6f6e06a39f4d3a05eb67cd1af59580afcbb0a1d8f45895a340379feeb660d6ab080910a58012", 0x7c}, {&(0x7f00000006c0)="0420be0c41a1b416de394df0018e0e2c52dbb325088fb56f2c5141883c2c", 0x1e}, {&(0x7f0000000700)="576004b0efc148a0a66f6362ff8a729eb05e677d133712c6b69a405b503be16545dee81e9ee94c960d2ac64cd1d192b697e4c5a07e8516731f63876c8b980f8297720967dadefb2f9e14cdd6b8b1c04cf0893088e418e1b6e339945ca268ba59832418b71980bf969fe453abe73ab6a9f8", 0x71}], 0x7}, 0x0, 0x8080}, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r10, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) r11 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @bcast}, [@rose, @null, @bcast, @default, @bcast, @default, @netrom]}, &(0x7f0000000240)=0x48, 0x800) syz_io_uring_submit(r6, r2, &(0x7f00000003c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r10, 0x0, 0x0, 0x7f, 0x5, 0x0, {0x0, 0x0, r11}}, 0x0) 18:55:24 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r7 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x104, &(0x7f0000000040)=0x5, 0x0, 0x4) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f00000000c0)}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 440.450078][T15085] input: syz0 as /devices/virtual/input/input1753 [ 440.471080][T15088] input: syz0 as /devices/virtual/input/input1754 18:55:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f00000000c0)}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 440.800280][T15102] input: syz0 as /devices/virtual/input/input1755 18:55:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 440.901271][T15105] input: syz0 as /devices/virtual/input/input1756 18:55:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 441.146263][T15110] input: syz0 as /devices/virtual/input/input1757 18:55:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 441.290065][T15112] input: syz0 as /devices/virtual/input/input1758 18:55:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:25 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r7 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x104, &(0x7f0000000040)=0x5, 0x0, 0x4) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:25 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x400}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042d000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000006, 0x80010, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x16, 0x1}, 0x80000000) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x4c15, &(0x7f00000000c0)={0x0, 0xb85a, 0x1, 0x0, 0x99}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) r9 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r4, r8, &(0x7f0000000840)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r5, 0x0, &(0x7f0000000800)={&(0x7f0000000400)=@isdn={0x22, 0x1, 0x73, 0x6c}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000480)="c39622eff0f0716a86fd7e59b0d0f9ed67b5cf416b0e127a5726727e3546bad7498eb17b05ba1c7ac1683598bb05d82b39fa61eae45d7a7b9359109df303", 0x3e}, {&(0x7f00000004c0)="63a54bff416fbe8939afdbf3755e5008598381a1c2abd69032b9ef9ef1d458ff145bd3a62417a8eb4d38eeb44bc307cdaac88b3db4ea33150737bdd9", 0x3c}, {&(0x7f0000000500)="67cbff3c9e4f04e37f79b4dbc7eeee6775e4ba61966c2510fc1ff2658c1c38f5e6245befb7c2c4cb7826a52df146040d6868c393a68bdfe4573098989a27cd4519737b2a80b45388db64dfe7976e50185d024ca1627fc7d0d224bf66543db649a8ef6f1257e4ed33ea062ada4c345aa83b48b054b012dc40865b000b4ef7bcab2a169c0ecee56aa50a59e96224cf16f9e4722356391e8844920f922d90007fb8468178d7671dcb7bc9141565ec6f90622f8c2d6970b44cbe9c304d403ce79a4b4d5ced16437264134ab4b47fcce0a0f1499ca7", 0xd3}, {&(0x7f0000000600)="eb0be9812d2b35b0ac17067645b23976310a1666e29bfb0cf005ab2662003d0862af8281c5b9bd73aa5949fd56", 0x2d}, {&(0x7f0000000640)="df474bcfb3b847775c442abb61d1dbfc8328945bd722e0ed42a8ef68b42f26c29fa57711092e2241da6ac5c249bca9875a866b0c0cd0c5db99aa60c0a8514a00d4c47026e05c6f9b789abd6d2d49dcdd1e0d6cdde02a6f6e06a39f4d3a05eb67cd1af59580afcbb0a1d8f45895a340379feeb660d6ab080910a58012", 0x7c}, {&(0x7f00000006c0)="0420be0c41a1b416de394df0018e0e2c52dbb325088fb56f2c5141883c2c", 0x1e}, {&(0x7f0000000700)="576004b0efc148a0a66f6362ff8a729eb05e677d133712c6b69a405b503be16545dee81e9ee94c960d2ac64cd1d192b697e4c5a07e8516731f63876c8b980f8297720967dadefb2f9e14cdd6b8b1c04cf0893088e418e1b6e339945ca268ba59832418b71980bf969fe453abe73ab6a9f8", 0x71}], 0x7}, 0x0, 0x8080}, 0x0) (async) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r10, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) r11 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @bcast}, [@rose, @null, @bcast, @default, @bcast, @default, @netrom]}, &(0x7f0000000240)=0x48, 0x800) syz_io_uring_submit(r6, r2, &(0x7f00000003c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r10, 0x0, 0x0, 0x7f, 0x5, 0x0, {0x0, 0x0, r11}}, 0x0) 18:55:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 441.449342][T15122] input: syz0 as /devices/virtual/input/input1759 [ 441.460680][T15123] input: syz0 as /devices/virtual/input/input1760 18:55:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:25 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x400}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042d000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000006, 0x80010, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x16, 0x1}, 0x80000000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4c15, &(0x7f00000000c0)={0x0, 0xb85a, 0x1, 0x0, 0x99}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r9 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000840)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r5, 0x0, &(0x7f0000000800)={&(0x7f0000000400)=@isdn={0x22, 0x1, 0x73, 0x6c}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000480)="c39622eff0f0716a86fd7e59b0d0f9ed67b5cf416b0e127a5726727e3546bad7498eb17b05ba1c7ac1683598bb05d82b39fa61eae45d7a7b9359109df303", 0x3e}, {&(0x7f00000004c0)="63a54bff416fbe8939afdbf3755e5008598381a1c2abd69032b9ef9ef1d458ff145bd3a62417a8eb4d38eeb44bc307cdaac88b3db4ea33150737bdd9", 0x3c}, {&(0x7f0000000500)="67cbff3c9e4f04e37f79b4dbc7eeee6775e4ba61966c2510fc1ff2658c1c38f5e6245befb7c2c4cb7826a52df146040d6868c393a68bdfe4573098989a27cd4519737b2a80b45388db64dfe7976e50185d024ca1627fc7d0d224bf66543db649a8ef6f1257e4ed33ea062ada4c345aa83b48b054b012dc40865b000b4ef7bcab2a169c0ecee56aa50a59e96224cf16f9e4722356391e8844920f922d90007fb8468178d7671dcb7bc9141565ec6f90622f8c2d6970b44cbe9c304d403ce79a4b4d5ced16437264134ab4b47fcce0a0f1499ca7", 0xd3}, {&(0x7f0000000600)="eb0be9812d2b35b0ac17067645b23976310a1666e29bfb0cf005ab2662003d0862af8281c5b9bd73aa5949fd56", 0x2d}, {&(0x7f0000000640)="df474bcfb3b847775c442abb61d1dbfc8328945bd722e0ed42a8ef68b42f26c29fa57711092e2241da6ac5c249bca9875a866b0c0cd0c5db99aa60c0a8514a00d4c47026e05c6f9b789abd6d2d49dcdd1e0d6cdde02a6f6e06a39f4d3a05eb67cd1af59580afcbb0a1d8f45895a340379feeb660d6ab080910a58012", 0x7c}, {&(0x7f00000006c0)="0420be0c41a1b416de394df0018e0e2c52dbb325088fb56f2c5141883c2c", 0x1e}, {&(0x7f0000000700)="576004b0efc148a0a66f6362ff8a729eb05e677d133712c6b69a405b503be16545dee81e9ee94c960d2ac64cd1d192b697e4c5a07e8516731f63876c8b980f8297720967dadefb2f9e14cdd6b8b1c04cf0893088e418e1b6e339945ca268ba59832418b71980bf969fe453abe73ab6a9f8", 0x71}], 0x7}, 0x0, 0x8080}, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r10, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) r11 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @bcast}, [@rose, @null, @bcast, @default, @bcast, @default, @netrom]}, &(0x7f0000000240)=0x48, 0x800) syz_io_uring_submit(r6, r2, &(0x7f00000003c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r10, 0x0, 0x0, 0x7f, 0x5, 0x0, {0x0, 0x0, r11}}, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x400}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042d000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000006, 0x80010, r0, 0x0) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x16, 0x1}, 0x80000000) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x4c15, &(0x7f00000000c0)={0x0, 0xb85a, 0x1, 0x0, 0x99}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r4, r8, &(0x7f0000000840)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r5, 0x0, &(0x7f0000000800)={&(0x7f0000000400)=@isdn={0x22, 0x1, 0x73, 0x6c}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000480)="c39622eff0f0716a86fd7e59b0d0f9ed67b5cf416b0e127a5726727e3546bad7498eb17b05ba1c7ac1683598bb05d82b39fa61eae45d7a7b9359109df303", 0x3e}, {&(0x7f00000004c0)="63a54bff416fbe8939afdbf3755e5008598381a1c2abd69032b9ef9ef1d458ff145bd3a62417a8eb4d38eeb44bc307cdaac88b3db4ea33150737bdd9", 0x3c}, {&(0x7f0000000500)="67cbff3c9e4f04e37f79b4dbc7eeee6775e4ba61966c2510fc1ff2658c1c38f5e6245befb7c2c4cb7826a52df146040d6868c393a68bdfe4573098989a27cd4519737b2a80b45388db64dfe7976e50185d024ca1627fc7d0d224bf66543db649a8ef6f1257e4ed33ea062ada4c345aa83b48b054b012dc40865b000b4ef7bcab2a169c0ecee56aa50a59e96224cf16f9e4722356391e8844920f922d90007fb8468178d7671dcb7bc9141565ec6f90622f8c2d6970b44cbe9c304d403ce79a4b4d5ced16437264134ab4b47fcce0a0f1499ca7", 0xd3}, {&(0x7f0000000600)="eb0be9812d2b35b0ac17067645b23976310a1666e29bfb0cf005ab2662003d0862af8281c5b9bd73aa5949fd56", 0x2d}, {&(0x7f0000000640)="df474bcfb3b847775c442abb61d1dbfc8328945bd722e0ed42a8ef68b42f26c29fa57711092e2241da6ac5c249bca9875a866b0c0cd0c5db99aa60c0a8514a00d4c47026e05c6f9b789abd6d2d49dcdd1e0d6cdde02a6f6e06a39f4d3a05eb67cd1af59580afcbb0a1d8f45895a340379feeb660d6ab080910a58012", 0x7c}, {&(0x7f00000006c0)="0420be0c41a1b416de394df0018e0e2c52dbb325088fb56f2c5141883c2c", 0x1e}, {&(0x7f0000000700)="576004b0efc148a0a66f6362ff8a729eb05e677d133712c6b69a405b503be16545dee81e9ee94c960d2ac64cd1d192b697e4c5a07e8516731f63876c8b980f8297720967dadefb2f9e14cdd6b8b1c04cf0893088e418e1b6e339945ca268ba59832418b71980bf969fe453abe73ab6a9f8", 0x71}], 0x7}, 0x0, 0x8080}, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r10, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) (async) accept4$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @bcast}, [@rose, @null, @bcast, @default, @bcast, @default, @netrom]}, &(0x7f0000000240)=0x48, 0x800) (async) syz_io_uring_submit(r6, r2, &(0x7f00000003c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r10, 0x0, 0x0, 0x7f, 0x5, 0x0, {0x0, 0x0, r11}}, 0x0) (async) [ 441.632933][T15139] input: syz0 as /devices/virtual/input/input1761 [ 441.650910][T15140] input: syz0 as /devices/virtual/input/input1762 18:55:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 441.911722][T15152] input: syz0 as /devices/virtual/input/input1763 [ 441.913282][T15153] input: syz0 as /devices/virtual/input/input1764 18:55:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 18:55:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:26 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) r7 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x104, &(0x7f0000000040)=0x5, 0x0, 0x4) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:26 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000041c1, 0x14002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1000, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x50, r0, 0x6) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x10010, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r5, 0x0, {0x0, r5}, 0x80, 0x8, 0x0, {0x0, 0x0, r3}}, 0x3) r7 = gettid() waitid(0x2, r7, 0x0, 0x4, 0x0) r8 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x1, 0x3f, 0xa, 0x0, 0x3, 0x10080, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x40100}, 0x48a28, 0x0, 0x7, 0x1, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0xce}, r7, 0xb, 0xffffffffffffffff, 0x9) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x50, r0, 0x8000000) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r12 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r12, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000180)=0x2) syz_io_uring_submit(r9, r11, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x5}, 0x6) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 442.331472][T15170] input: syz0 as /devices/virtual/input/input1765 18:55:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 442.426946][T15178] input: syz0 as /devices/virtual/input/input1766 18:55:26 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000041c1, 0x14002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1000, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x50, r0, 0x6) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x10010, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r5, 0x0, {0x0, r5}, 0x80, 0x8, 0x0, {0x0, 0x0, r3}}, 0x3) r7 = gettid() waitid(0x2, r7, 0x0, 0x4, 0x0) r8 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x1, 0x3f, 0xa, 0x0, 0x3, 0x10080, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x40100}, 0x48a28, 0x0, 0x7, 0x1, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0xce}, r7, 0xb, 0xffffffffffffffff, 0x9) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x50, r0, 0x8000000) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r12 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r12, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000180)=0x2) syz_io_uring_submit(r9, r11, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x5}, 0x6) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000041c1, 0x14002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1000, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x50, r0, 0x6) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000340)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x10010, r0, 0x10000000) (async) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r5, 0x0, {0x0, r5}, 0x80, 0x8, 0x0, {0x0, 0x0, r3}}, 0x3) (async) gettid() (async) waitid(0x2, r7, 0x0, 0x4, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x1, 0x3f, 0xa, 0x0, 0x3, 0x10080, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x40100}, 0x48a28, 0x0, 0x7, 0x1, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0xce}, r7, 0xb, 0xffffffffffffffff, 0x9) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x50, r0, 0x8000000) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r10, r11, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r12, 0x0, 0x0}, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000180)=0x2) (async) syz_io_uring_submit(r9, r11, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x5}, 0x6) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:55:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:26 executing program 0: r0 = syz_io_uring_setup(0x4141, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x0, 0x0, 0x1d3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 442.582845][T15188] input: syz0 as /devices/virtual/input/input1767 [ 442.620919][T15191] input: syz0 as /devices/virtual/input/input1768 18:55:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 442.856153][T15207] input: syz0 as /devices/virtual/input/input1769 [ 442.885558][T15209] input: syz0 as /devices/virtual/input/input1770 18:55:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 18:55:27 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000041c1, 0x14002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1000, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x50, r0, 0x6) (async, rerun: 32) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000340)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 32) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x10010, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r5, 0x0, {0x0, r5}, 0x80, 0x8, 0x0, {0x0, 0x0, r3}}, 0x3) (async) r7 = gettid() waitid(0x2, r7, 0x0, 0x4, 0x0) r8 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x1, 0x3f, 0xa, 0x0, 0x3, 0x10080, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x40100}, 0x48a28, 0x0, 0x7, 0x1, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0xce}, r7, 0xb, 0xffffffffffffffff, 0x9) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x50, r0, 0x8000000) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r12 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r12, 0x0, 0x0}, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000180)=0x2) (async, rerun: 32) syz_io_uring_submit(r9, r11, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x5}, 0x6) (rerun: 32) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 443.273720][T15216] input: syz0 as /devices/virtual/input/input1771 [ 443.309645][T15218] input: syz0 as /devices/virtual/input/input1772 18:55:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:27 executing program 0: r0 = syz_io_uring_setup(0x4141, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x0, 0x0, 0x1d3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 32) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:27 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2886, &(0x7f00000000c0)={0x0, 0x57a6, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f000042c000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r5 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000400)={0x2, 0x80, 0x6, 0xc1, 0x7, 0x9, 0x0, 0x0, 0x80200, 0x12, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000003c0), 0x7}, 0x56009, 0x81, 0x5, 0x8, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x5}) r7 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x2, 0x200000ce, r6) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r8, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) r10 = gettid() waitid(0x2, r10, 0x0, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x8c, 0x2, 0xc4, 0x6, 0x0, 0x1, 0x9080, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x21, 0x0, @perf_config_ext={0xff}, 0xc20, 0x6, 0x4, 0x9, 0x189d, 0x7, 0xff06, 0x0, 0x9, 0x0, 0x2}, r10, 0x9, r11, 0x0) [ 443.567287][T15231] input: syz0 as /devices/virtual/input/input1773 18:55:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 443.628911][T15233] input: syz0 as /devices/virtual/input/input1774 18:55:27 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2886, &(0x7f00000000c0)={0x0, 0x57a6, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f000042c000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r5 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000400)={0x2, 0x80, 0x6, 0xc1, 0x7, 0x9, 0x0, 0x0, 0x80200, 0x12, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000003c0), 0x7}, 0x56009, 0x81, 0x5, 0x8, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x5}) (async) r7 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x2, 0x200000ce, r6) (async) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r8, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) r10 = gettid() waitid(0x2, r10, 0x0, 0x4, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x8c, 0x2, 0xc4, 0x6, 0x0, 0x1, 0x9080, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x21, 0x0, @perf_config_ext={0xff}, 0xc20, 0x6, 0x4, 0x9, 0x189d, 0x7, 0xff06, 0x0, 0x9, 0x0, 0x2}, r10, 0x9, r11, 0x0) 18:55:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 443.790952][T15242] input: syz0 as /devices/virtual/input/input1775 [ 443.917504][T15250] input: syz0 as /devices/virtual/input/input1776 18:55:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 18:55:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:28 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (async) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2886, &(0x7f00000000c0)={0x0, 0x57a6, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f000042c000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) (async) r5 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000400)={0x2, 0x80, 0x6, 0xc1, 0x7, 0x9, 0x0, 0x0, 0x80200, 0x12, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000003c0), 0x7}, 0x56009, 0x81, 0x5, 0x8, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x5}) (async) r7 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x2, 0x200000ce, r6) (async) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x1) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r8, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) r10 = gettid() waitid(0x2, r10, 0x0, 0x4, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x8c, 0x2, 0xc4, 0x6, 0x0, 0x1, 0x9080, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x21, 0x0, @perf_config_ext={0xff}, 0xc20, 0x6, 0x4, 0x9, 0x189d, 0x7, 0xff06, 0x0, 0x9, 0x0, 0x2}, r10, 0x9, r11, 0x0) 18:55:28 executing program 0: r0 = syz_io_uring_setup(0x4141, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x0, 0x0, 0x1d3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 444.230042][T15254] input: syz0 as /devices/virtual/input/input1777 [ 444.286967][T15262] input: syz0 as /devices/virtual/input/input1778 18:55:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:28 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x42094, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 444.458464][T15273] input: syz0 as /devices/virtual/input/input1779 18:55:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:28 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x42094, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x42094, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) [ 444.586508][T15277] input: syz0 as /devices/virtual/input/input1780 18:55:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 444.670273][T15279] input: syz0 as /devices/virtual/input/input1781 [ 444.822274][T15289] input: syz0 as /devices/virtual/input/input1782 18:55:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:29 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x42094, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:29 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4680, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 445.254514][T15299] input: syz0 as /devices/virtual/input/input1783 [ 445.267491][T15297] input: syz0 as /devices/virtual/input/input1784 18:55:29 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3c95, 0xc8b, 0x3, &(0x7f0000000040)={[0xfffffffffffffbfa]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 445.697432][T15313] input: syz0 as /devices/virtual/input/input1785 18:55:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 445.763718][T15316] input: syz0 as /devices/virtual/input/input1786 18:55:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 446.056168][T15321] input: syz0 as /devices/virtual/input/input1787 18:55:30 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4680, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4680, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) [ 446.136386][T15326] input: syz0 as /devices/virtual/input/input1788 18:55:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:30 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x3c95, 0xc8b, 0x3, &(0x7f0000000040)={[0xfffffffffffffbfa]}, 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 32) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:30 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 446.339782][T15333] input: syz0 as /devices/virtual/input/input1789 18:55:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 446.453510][T15344] input: syz0 as /devices/virtual/input/input1790 18:55:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 446.623820][T15350] input: syz0 as /devices/virtual/input/input1791 18:55:30 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 446.816017][T15356] input: syz0 as /devices/virtual/input/input1792 18:55:30 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x3c95, 0xc8b, 0x3, &(0x7f0000000040)={[0xfffffffffffffbfa]}, 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 18:55:30 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 447.028860][T15361] input: syz0 as /devices/virtual/input/input1793 18:55:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 447.164931][T15369] input: syz0 as /devices/virtual/input/input1794 [ 447.283447][T15372] input: syz0 as /devices/virtual/input/input1795 18:55:31 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4680, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4680, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:55:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:31 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 447.583592][T15378] input: syz0 as /devices/virtual/input/input1796 [ 447.615587][T15381] input: syz0 as /devices/virtual/input/input1797 18:55:31 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 447.703809][T15385] input: syz0 as /devices/virtual/input/input1798 [ 447.822738][T15397] input: syz0 as /devices/virtual/input/input1799 18:55:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 448.096468][T15399] input: syz0 as /devices/virtual/input/input1800 18:55:32 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 448.271035][T15405] input: syz0 as /devices/virtual/input/input1801 [ 448.366625][T15410] input: syz0 as /devices/virtual/input/input1802 18:55:32 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1000, 0x8000000006e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r7 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x8) 18:55:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:32 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) [ 448.899659][T15414] input: syz0 as /devices/virtual/input/input1803 [ 448.932375][T15423] input: syz0 as /devices/virtual/input/input1804 18:55:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 449.110298][T15434] input: syz0 as /devices/virtual/input/input1805 18:55:33 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1000, 0x8000000006e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r7 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x8) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1000, 0x8000000006e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x8) (async) 18:55:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 449.213108][T15436] input: syz0 as /devices/virtual/input/input1806 18:55:33 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 449.365989][T15444] input: syz0 as /devices/virtual/input/input1807 18:55:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 449.435484][T15457] input: syz0 as /devices/virtual/input/input1808 18:55:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:33 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1000, 0x8000000006e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r7 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x8) 18:55:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:33 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x11, 0xa0, 0x2ce}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x827e, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa9}, 0x1c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x13000e2, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_client}, {@cache_fscache}, {@nodevmap}, {@loose}, {@posixacl}], [{@dont_hash}, {@dont_hash}, {@fowner_lt={'fowner<', 0xee01}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, '-['}}]}}) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 449.571125][T15462] input: syz0 as /devices/virtual/input/input1809 18:55:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 449.654260][T15469] input: syz0 as /devices/virtual/input/input1810 18:55:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:33 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x11, 0xa0, 0x2ce}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 32) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x827e, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa9}, 0x1c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) (async) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x13000e2, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_client}, {@cache_fscache}, {@nodevmap}, {@loose}, {@posixacl}], [{@dont_hash}, {@dont_hash}, {@fowner_lt={'fowner<', 0xee01}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, '-['}}]}}) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 449.722786][T15475] input: syz0 as /devices/virtual/input/input1811 18:55:33 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000340)="2c7e50bf5b41631a719ec8da9b9cb243f5d717eff3ed548bb84bb6fedced6ac1b529f36edff9d2437ad38bd8014dc2ec23b393c4ec268fc9ef1f1a81616cabd4a8824731946e7ff25e16d8a223ee0ab2d039e759ce89ff046b03191047d446699961872fcef0cc7555ed546fdd77839e2b51848c12b9e4d7e0b5e9d0ed9bdb635cba1f71bd88585fe4916dfb41ca4aa432f2f6312599ff40661ce4d767b72abfdc2d22af53bd84dab01abd640102b2e87dcdcbcb5d2481039a08f6679720b0dfd8", 0xc1, 0x3}], 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="282be5233a2c002c2c5c2c002c646566636f6e746578743d73746166665f752c646f6e745f686173682c3600"]) r5 = dup(r4) write$FUSE_BMAP(r5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x80, 0x7, 0x1f, 0x8, 0x0, 0x4, 0xa0204, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7, 0x3}, 0x80, 0x9, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0x7, 0x0, 0x9}, 0xffffffffffffffff, 0x6, r5, 0x8) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 449.798726][T15477] input: syz0 as /devices/virtual/input/input1812 18:55:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 449.960962][T15487] input: syz0 as /devices/virtual/input/input1813 [ 450.101291][T15490] input: syz0 as /devices/virtual/input/input1814 [ 450.152710][T15485] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. 18:55:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:34 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x11, 0xa0, 0x2ce}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x827e, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa9}, 0x1c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x13000e2, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_client}, {@cache_fscache}, {@nodevmap}, {@loose}, {@posixacl}], [{@dont_hash}, {@dont_hash}, {@fowner_lt={'fowner<', 0xee01}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, '-['}}]}}) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x11, 0xa0, 0x2ce}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x827e, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa9}, 0x1c) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x13000e2, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_client}, {@cache_fscache}, {@nodevmap}, {@loose}, {@posixacl}], [{@dont_hash}, {@dont_hash}, {@fowner_lt={'fowner<', 0xee01}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, '-['}}]}}) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:55:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:34 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 450.529247][T15497] input: syz0 as /devices/virtual/input/input1815 [ 450.536321][T15495] input: syz0 as /devices/virtual/input/input1816 18:55:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:34 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x2, 0x200000ce, r5) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x0, {0x0, r5}}, 0x101) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:34 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000340)="2c7e50bf5b41631a719ec8da9b9cb243f5d717eff3ed548bb84bb6fedced6ac1b529f36edff9d2437ad38bd8014dc2ec23b393c4ec268fc9ef1f1a81616cabd4a8824731946e7ff25e16d8a223ee0ab2d039e759ce89ff046b03191047d446699961872fcef0cc7555ed546fdd77839e2b51848c12b9e4d7e0b5e9d0ed9bdb635cba1f71bd88585fe4916dfb41ca4aa432f2f6312599ff40661ce4d767b72abfdc2d22af53bd84dab01abd640102b2e87dcdcbcb5d2481039a08f6679720b0dfd8", 0xc1, 0x3}], 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="282be5233a2c002c2c5c2c002c646566636f6e746578743d73746166665f752c646f6e745f686173682c3600"]) r5 = dup(r4) write$FUSE_BMAP(r5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x80, 0x7, 0x1f, 0x8, 0x0, 0x4, 0xa0204, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7, 0x3}, 0x80, 0x9, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0x7, 0x0, 0x9}, 0xffffffffffffffff, 0x6, r5, 0x8) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000340)="2c7e50bf5b41631a719ec8da9b9cb243f5d717eff3ed548bb84bb6fedced6ac1b529f36edff9d2437ad38bd8014dc2ec23b393c4ec268fc9ef1f1a81616cabd4a8824731946e7ff25e16d8a223ee0ab2d039e759ce89ff046b03191047d446699961872fcef0cc7555ed546fdd77839e2b51848c12b9e4d7e0b5e9d0ed9bdb635cba1f71bd88585fe4916dfb41ca4aa432f2f6312599ff40661ce4d767b72abfdc2d22af53bd84dab01abd640102b2e87dcdcbcb5d2481039a08f6679720b0dfd8", 0xc1, 0x3}], 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="282be5233a2c002c2c5c2c002c646566636f6e746578743d73746166665f752c646f6e745f686173682c3600"]) (async) dup(r4) (async) write$FUSE_BMAP(r5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x80, 0x7, 0x1f, 0x8, 0x0, 0x4, 0xa0204, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7, 0x3}, 0x80, 0x9, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0x7, 0x0, 0x9}, 0xffffffffffffffff, 0x6, r5, 0x8) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:55:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:34 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 450.841907][T15520] input: syz0 as /devices/virtual/input/input1817 [ 450.899211][T15521] input: syz0 as /devices/virtual/input/input1818 18:55:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:35 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 451.132698][T15541] input: syz0 as /devices/virtual/input/input1819 [ 451.194627][T15544] input: syz0 as /devices/virtual/input/input1820 [ 451.305410][T15519] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. 18:55:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:35 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 451.535975][T15551] input: syz0 as /devices/virtual/input/input1822 [ 451.542937][T15548] input: syz0 as /devices/virtual/input/input1821 18:55:35 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (async, rerun: 32) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r4 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) r6 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x2, 0x200000ce, r5) (async, rerun: 32) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x0, {0x0, r5}}, 0x101) (rerun: 32) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:35 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r4 = syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000340)="2c7e50bf5b41631a719ec8da9b9cb243f5d717eff3ed548bb84bb6fedced6ac1b529f36edff9d2437ad38bd8014dc2ec23b393c4ec268fc9ef1f1a81616cabd4a8824731946e7ff25e16d8a223ee0ab2d039e759ce89ff046b03191047d446699961872fcef0cc7555ed546fdd77839e2b51848c12b9e4d7e0b5e9d0ed9bdb635cba1f71bd88585fe4916dfb41ca4aa432f2f6312599ff40661ce4d767b72abfdc2d22af53bd84dab01abd640102b2e87dcdcbcb5d2481039a08f6679720b0dfd8", 0xc1, 0x3}], 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="282be5233a2c002c2c5c2c002c646566636f6e746578743d73746166665f752c646f6e745f686173682c3600"]) r5 = dup(r4) write$FUSE_BMAP(r5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x80, 0x7, 0x1f, 0x8, 0x0, 0x4, 0xa0204, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7, 0x3}, 0x80, 0x9, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0x7, 0x0, 0x9}, 0xffffffffffffffff, 0x6, r5, 0x8) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:35 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 451.924567][T15566] input: syz0 as /devices/virtual/input/input1823 [ 451.932102][T15567] input: syz0 as /devices/virtual/input/input1824 18:55:35 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r4 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) r6 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x2, 0x200000ce, r5) (async) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x0, {0x0, r5}}, 0x101) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 452.047307][T15573] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. [ 452.099494][T15580] input: syz0 as /devices/virtual/input/input1825 18:55:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:36 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:36 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r8 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r8, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r9, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r12 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r12, 0x2, 0x200000ce, r11) syz_io_uring_submit(0x0, r9, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x100, 0x1000, 0x0, {0x0, r11}}, 0x42) 18:55:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:36 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x6b72, &(0x7f00000000c0)={0x0, 0xf4cb, 0x10, 0x0, 0x36c}, &(0x7f000042b000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="0000690a00000000ebff2f0016716675c30d668f8bbd28740b6a60425ae507de93c157e6ad932f3a"]) io_uring_enter(r0, 0x3c92, 0x65e8, 0x3, &(0x7f0000000400)={[0x1]}, 0x8) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r6, 0x0, &(0x7f0000000340)="7ad21c7ccb0fdd51a54e74e353dda1505767002de351081a3ba2c57e0b9f0973d2fbebeb0099c351d503b3be51d5cfa5816a5bd756cbf797bf7bed4d4b0cff6c5919471bbeb29e44e02c47820a6c81e504ed1c778b426bca46d38919964eebc24af290c0da7ab0bcc7799269c02d26edafa4453d8d5b33174872c3f506459a2c7ca7ced9975260d999eb7ebd738bb77fce53ec02423d705d06956442feae17969849594c709b4b0f03f8c56fb27a0208ef175c0c550b5b", 0xb7, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 452.562470][T15591] input: syz0 as /devices/virtual/input/input1827 [ 452.592737][T15588] input: syz0 as /devices/virtual/input/input1826 18:55:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:36 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r8 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r8, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r9, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r12 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r12, 0x2, 0x200000ce, r11) syz_io_uring_submit(0x0, r9, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x100, 0x1000, 0x0, {0x0, r11}}, 0x42) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r8, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r6, r9, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x3b81, &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r12, 0x2, 0x200000ce, r11) (async) syz_io_uring_submit(0x0, r9, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x100, 0x1000, 0x0, {0x0, r11}}, 0x42) (async) 18:55:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:36 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x6b72, &(0x7f00000000c0)={0x0, 0xf4cb, 0x10, 0x0, 0x36c}, &(0x7f000042b000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="0000690a00000000ebff2f0016716675c30d668f8bbd28740b6a60425ae507de93c157e6ad932f3a"]) io_uring_enter(r0, 0x3c92, 0x65e8, 0x3, &(0x7f0000000400)={[0x1]}, 0x8) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r6, 0x0, &(0x7f0000000340)="7ad21c7ccb0fdd51a54e74e353dda1505767002de351081a3ba2c57e0b9f0973d2fbebeb0099c351d503b3be51d5cfa5816a5bd756cbf797bf7bed4d4b0cff6c5919471bbeb29e44e02c47820a6c81e504ed1c778b426bca46d38919964eebc24af290c0da7ab0bcc7799269c02d26edafa4453d8d5b33174872c3f506459a2c7ca7ced9975260d999eb7ebd738bb77fce53ec02423d705d06956442feae17969849594c709b4b0f03f8c56fb27a0208ef175c0c550b5b", 0xb7, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_setup(0x6b72, &(0x7f00000000c0)={0x0, 0xf4cb, 0x10, 0x0, 0x36c}, &(0x7f000042b000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000180)) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="0000690a00000000ebff2f0016716675c30d668f8bbd28740b6a60425ae507de93c157e6ad932f3a"]) (async) io_uring_enter(r0, 0x3c92, 0x65e8, 0x3, &(0x7f0000000400)={[0x1]}, 0x8) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r6, 0x0, &(0x7f0000000340)="7ad21c7ccb0fdd51a54e74e353dda1505767002de351081a3ba2c57e0b9f0973d2fbebeb0099c351d503b3be51d5cfa5816a5bd756cbf797bf7bed4d4b0cff6c5919471bbeb29e44e02c47820a6c81e504ed1c778b426bca46d38919964eebc24af290c0da7ab0bcc7799269c02d26edafa4453d8d5b33174872c3f506459a2c7ca7ced9975260d999eb7ebd738bb77fce53ec02423d705d06956442feae17969849594c709b4b0f03f8c56fb27a0208ef175c0c550b5b", 0xb7, 0x0, 0x0, {0x0, r7}}, 0x1) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:55:36 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 452.831275][T15601] input: syz0 as /devices/virtual/input/input1828 18:55:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 452.930540][T15610] input: syz0 as /devices/virtual/input/input1829 18:55:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 453.140878][T15621] input: syz0 as /devices/virtual/input/input1830 18:55:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 453.223613][T15602] syz-executor.0: vmalloc error: size 20480, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 453.241322][T15630] input: syz0 as /devices/virtual/input/input1831 [ 453.301425][T15602] CPU: 1 PID: 15602 Comm: syz-executor.0 Not tainted 5.16.0-rc5-syzkaller #0 [ 453.310229][T15602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.320289][T15602] Call Trace: [ 453.323568][T15602] [ 453.326497][T15602] dump_stack_lvl+0x201/0x2d8 [ 453.331184][T15602] ? show_regs_print_info+0x12/0x12 [ 453.336390][T15602] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 453.342125][T15602] warn_alloc+0x221/0x370 [ 453.346464][T15602] ? zone_watermark_ok_safe+0x280/0x280 [ 453.352038][T15602] ? alloc_pages+0x44a/0x560 [ 453.356649][T15602] __vmalloc_node_range+0x7c5/0x960 [ 453.361877][T15602] dup_task_struct+0x65d/0x9a0 [ 453.366652][T15602] ? copy_process+0x64d/0x5ca0 [ 453.371429][T15602] ? _raw_spin_unlock_irq+0x1f/0x40 [ 453.376637][T15602] ? lockdep_hardirqs_on+0x95/0x140 [ 453.381843][T15602] copy_process+0x64d/0x5ca0 [ 453.386447][T15602] ? _raw_spin_unlock+0x24/0x40 [ 453.391298][T15602] ? do_anonymous_page+0xe26/0x14f0 [ 453.396511][T15602] ? __lock_acquire+0x1382/0x2b00 [ 453.401809][T15602] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 453.406945][T15602] kernel_clone+0x22a/0x7e0 [ 453.411465][T15602] ? create_io_thread+0x1d0/0x1d0 [ 453.416510][T15602] ? __context_tracking_exit+0x7a/0xd0 [ 453.422090][T15602] __x64_sys_clone+0x245/0x2b0 [ 453.426864][T15602] ? __do_sys_vfork+0x130/0x130 [ 453.431716][T15602] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 453.437716][T15602] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 453.443706][T15602] ? lockdep_hardirqs_on+0x95/0x140 [ 453.448917][T15602] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 453.454910][T15602] do_syscall_64+0x44/0xd0 [ 453.459349][T15602] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 453.465252][T15602] RIP: 0033:0x7f1bed4f82c1 [ 453.469698][T15602] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 453.489314][T15602] RSP: 002b:00007ffea3aa96d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 453.497744][T15602] RAX: ffffffffffffffda RBX: 00007f1bebd43700 RCX: 00007f1bed4f82c1 [ 453.505729][T15602] RDX: 00007f1bebd439d0 RSI: 00007f1bebd432f0 RDI: 00000000003d0f00 [ 453.513715][T15602] RBP: 00007ffea3aa9920 R08: 00007f1bebd43700 R09: 00007f1bebd43700 [ 453.521701][T15602] R10: 00007f1bebd439d0 R11: 0000000000000206 R12: 00007ffea3aa978e [ 453.529689][T15602] R13: 00007ffea3aa978f R14: 00007f1bebd43300 R15: 0000000000022000 [ 453.537697][T15602] 18:55:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:37 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) r8 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r8, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r9, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) (async) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) (async) r12 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r12, 0x2, 0x200000ce, r11) (async) syz_io_uring_submit(0x0, r9, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x100, 0x1000, 0x0, {0x0, r11}}, 0x42) [ 453.585600][T15640] input: syz0 as /devices/virtual/input/input1832 18:55:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 453.683153][T15645] input: syz0 as /devices/virtual/input/input1833 [ 453.711239][T15602] Mem-Info: [ 453.714660][T15602] active_anon:554 inactive_anon:224384 isolated_anon:0 [ 453.714660][T15602] active_file:3920 inactive_file:44647 isolated_file:0 [ 453.714660][T15602] unevictable:768 dirty:37 writeback:0 [ 453.714660][T15602] slab_reclaimable:19601 slab_unreclaimable:98912 [ 453.714660][T15602] mapped:27964 shmem:5094 pagetables:1719 bounce:0 [ 453.714660][T15602] kernel_misc_reclaimable:0 [ 453.714660][T15602] free:1201602 free_pcp:11168 free_cma:0 [ 453.767571][T15602] Node 0 active_anon:2212kB inactive_anon:894820kB active_file:15608kB inactive_file:178588kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111856kB dirty:144kB writeback:0kB shmem:18112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 864256kB writeback_tmp:0kB kernel_stack:12380kB pagetables:6872kB all_unreclaimable? no [ 453.840522][T15602] Node 1 active_anon:4kB inactive_anon:724kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 453.909307][T15602] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.937450][T15602] lowmem_reserve[]: 0 2635 2636 2636 2636 [ 453.960691][T15602] Node 0 DMA32 free:849636kB boost:0kB min:35588kB low:44484kB high:53380kB reserved_highatomic:0KB active_anon:2012kB inactive_anon:892708kB active_file:15608kB inactive_file:178588kB unevictable:1536kB writepending:144kB present:3129332kB managed:2705612kB mlocked:0kB bounce:0kB free_pcp:43188kB local_pcp:21084kB free_cma:0kB [ 453.996695][T15602] lowmem_reserve[]: 0 0 1 1 1 [ 454.001838][T15602] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 454.029023][T15602] lowmem_reserve[]: 0 0 0 0 0 [ 454.033863][T15602] Node 1 Normal free:3947504kB boost:0kB min:54300kB low:67872kB high:81444kB reserved_highatomic:0KB active_anon:4kB inactive_anon:724kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:1940kB local_pcp:160kB free_cma:0kB [ 454.065014][T15602] lowmem_reserve[]: 0 0 0 0 0 [ 454.069980][T15602] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 454.084277][T15602] Node 0 DMA32: 5091*4kB (UME) 3117*8kB (UME) 2695*16kB (UME) 1256*32kB (UME) 688*64kB (UME) 149*128kB (UM) 30*256kB (UM) 14*512kB (UME) 8*1024kB (UME) 2*2048kB (UM) 154*4096kB (UM) = 849636kB [ 454.104125][T15602] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 454.148237][T15602] Node 1 Normal: 132*4kB (UE) 30*8kB (UME) 27*16kB (UME) 154*32kB (UE) 84*64kB (UME) 22*128kB (UE) 6*256kB (UME) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (UE) 958*4096kB (M) = 3947504kB [ 454.168898][T15602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.179130][T15602] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 454.189657][T15602] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.199805][T15602] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 454.210556][T15602] 16677 total pagecache pages [ 454.215246][T15602] 0 pages in swap cache [ 454.227837][T15602] Swap cache stats: add 0, delete 0, find 0/0 [ 454.234037][T15602] Free swap = 0kB [ 454.238589][T15602] Total swap = 0kB [ 454.242435][T15602] 2097051 pages RAM 18:55:38 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_setup(0x6b72, &(0x7f00000000c0)={0x0, 0xf4cb, 0x10, 0x0, 0x36c}, &(0x7f000042b000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="0000690a00000000ebff2f0016716675c30d668f8bbd28740b6a60425ae507de93c157e6ad932f3a"]) (async) io_uring_enter(r0, 0x3c92, 0x65e8, 0x3, &(0x7f0000000400)={[0x1]}, 0x8) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r6, 0x0, &(0x7f0000000340)="7ad21c7ccb0fdd51a54e74e353dda1505767002de351081a3ba2c57e0b9f0973d2fbebeb0099c351d503b3be51d5cfa5816a5bd756cbf797bf7bed4d4b0cff6c5919471bbeb29e44e02c47820a6c81e504ed1c778b426bca46d38919964eebc24af290c0da7ab0bcc7799269c02d26edafa4453d8d5b33174872c3f506459a2c7ca7ced9975260d999eb7ebd738bb77fce53ec02423d705d06956442feae17969849594c709b4b0f03f8c56fb27a0208ef175c0c550b5b", 0xb7, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:38 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000754000/0x1000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r8, @ANYBLOB="01bade000000000004003b1c210008000300", @ANYRES32=r7, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x158) sendfile(r10, r9, 0x0, 0x10000a006) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x2fc, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x26c, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d5c0033f802ee9f29a5f9fdda3331aad1067a6316cede6147994d6952f4ca2d3"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x188, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c91ced16e803bab6de67cd4feb5a8d14c498b3cd0dfcc27f671e71162fc0afcd"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7d5cfa1fa932e154bee7f6860f859d9db06d8f93e64aac842abd03b3ac3da740"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x200}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @mcast2, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a05d06b996c69ff555d44d5fa743f884bef10fe4ba302ba691e1bf9d5bc3b992"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:38 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 454.246346][T15602] 0 pages HighMem/MovableOnly [ 454.257830][T15602] 387047 pages reserved [ 454.262498][T15602] 0 pages cma reserved [ 454.330723][T15656] input: syz0 as /devices/virtual/input/input1834 [ 454.347548][T15658] input: syz0 as /devices/virtual/input/input1835 18:55:38 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 454.447627][ T26] audit: type=1804 audit(1639940138.343:5): pid=15659 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir768687968/syzkaller.ynZvti/565/cgroup.controllers" dev="sda1" ino=1196 res=1 errno=0 18:55:38 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) r6 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00006d8000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r9 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d8000/0x3000)=nil, 0x3000, 0x8, 0x12, r6, 0x8000000) r12 = mmap$IORING_OFF_SQES(&(0x7f00000bf000/0x2000)=nil, 0x2000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, r9, &(0x7f0000000340), &(0x7f0000000100)='./file0\x00', 0x1}, 0x5) syz_io_uring_submit(r7, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x6, 0x80000000, {0x0, r5}, 0x101, 0x1, 0x0, {0x0, 0x0, r3}}, 0xfff) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 454.567218][T15669] input: syz0 as /devices/virtual/input/input1836 18:55:38 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 454.624896][T15673] input: syz0 as /devices/virtual/input/input1837 18:55:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 454.760597][T15678] input: syz0 as /devices/virtual/input/input1838 [ 454.819427][T15681] input: syz0 as /devices/virtual/input/input1839 18:55:38 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:38 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000754000/0x1000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r8, @ANYBLOB="01bade000000000004003b1c210008000300", @ANYRES32=r7, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000004c0)=ANY=[@ANYBLOB="002a000000000000009f9296b32281d3d1c690c30bee35cc7b79c8aaba75e5deabc388e18ba49273e69d2f887dd28e43ae755f6ae0c573227121ed69fc0eacd66ec63c7e316ea882e61c48827e0c1ee22e1657dc2090ee0251de38af73265013bc85e0863140335919e4d1ebc310167409a95c27013197f61bf77e96b3063ffc522814533b8ff4bbb828acca6edcc650a67530b3399f52d4b6fbc65aab3dfbec12d6160448d0025f9ad23c3a7d53f809f53ac19acf3e4a4ac86abcef0b00010007200000000006000000000000000000000000000000000000000000000000000000c910fe7800000000000000000000000000bb0076474de4f0a33aefb8758651f4031ce7badd2601590735b39e0e8020cb8b9d352128cff74db925f0f088a605ea1db63091aaee4c21f8eabf6d77afbdf9ec22185226fb2df7b7a7478af9bd8b19eb4cffc17da0efeb736c681d338cbc9f6cd4e764ca75cfdf0bb8be4396463219"], 0x158) sendfile(r10, r9, 0x0, 0x10000a006) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x2fc, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x26c, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d5c0033f802ee9f29a5f9fdda3331aad1067a6316cede6147994d6952f4ca2d3"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x188, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c91ced16e803bab6de67cd4feb5a8d14c498b3cd0dfcc27f671e71162fc0afcd"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7d5cfa1fa932e154bee7f6860f859d9db06d8f93e64aac842abd03b3ac3da740"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x200}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @mcast2, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a05d06b996c69ff555d44d5fa743f884bef10fe4ba302ba691e1bf9d5bc3b992"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000754000/0x1000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r8, @ANYBLOB="01bade000000000004003b1c210008000300", @ANYRES32=r7, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) (async) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r5, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x158) (async) sendfile(r10, r9, 0x0, 0x10000a006) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x2fc, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x26c, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d5c0033f802ee9f29a5f9fdda3331aad1067a6316cede6147994d6952f4ca2d3"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x188, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c91ced16e803bab6de67cd4feb5a8d14c498b3cd0dfcc27f671e71162fc0afcd"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7d5cfa1fa932e154bee7f6860f859d9db06d8f93e64aac842abd03b3ac3da740"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x200}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @mcast2, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a05d06b996c69ff555d44d5fa743f884bef10fe4ba302ba691e1bf9d5bc3b992"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:55:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 455.051612][T15689] input: syz0 as /devices/virtual/input/input1840 [ 455.076159][ T26] audit: type=1804 audit(1639940138.973:6): pid=15690 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir768687968/syzkaller.ynZvti/566/cgroup.controllers" dev="sda1" ino=1191 res=1 errno=0 18:55:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:39 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) r6 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00006d8000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) r9 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d8000/0x3000)=nil, 0x3000, 0x8, 0x12, r6, 0x8000000) (async) r12 = mmap$IORING_OFF_SQES(&(0x7f00000bf000/0x2000)=nil, 0x2000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, r9, &(0x7f0000000340), &(0x7f0000000100)='./file0\x00', 0x1}, 0x5) (async) syz_io_uring_submit(r7, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x6, 0x80000000, {0x0, r5}, 0x101, 0x1, 0x0, {0x0, 0x0, r3}}, 0xfff) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 455.268241][T15707] input: syz0 as /devices/virtual/input/input1841 18:55:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:39 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) r6 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00006d8000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r9 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d8000/0x3000)=nil, 0x3000, 0x8, 0x12, r6, 0x8000000) r12 = mmap$IORING_OFF_SQES(&(0x7f00000bf000/0x2000)=nil, 0x2000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, r9, &(0x7f0000000340), &(0x7f0000000100)='./file0\x00', 0x1}, 0x5) syz_io_uring_submit(r7, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x6, 0x80000000, {0x0, r5}, 0x101, 0x1, 0x0, {0x0, 0x0, r3}}, 0xfff) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00006d8000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r7, r10, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f00006d8000/0x3000)=nil, 0x3000, 0x8, 0x12, r6, 0x8000000) (async) mmap$IORING_OFF_SQES(&(0x7f00000bf000/0x2000)=nil, 0x2000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, r9, &(0x7f0000000340), &(0x7f0000000100)='./file0\x00', 0x1}, 0x5) (async) syz_io_uring_submit(r7, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x6, 0x80000000, {0x0, r5}, 0x101, 0x1, 0x0, {0x0, 0x0, r3}}, 0xfff) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:55:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 455.355263][T15716] input: syz0 as /devices/virtual/input/input1842 18:55:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 455.469591][T15721] input: syz0 as /devices/virtual/input/input1843 18:55:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 455.683259][T15728] input: syz0 as /devices/virtual/input/input1844 18:55:39 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000754000/0x1000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r8, @ANYBLOB="01bade000000000004003b1c210008000300", @ANYRES32=r7, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x158) sendfile(r10, r9, 0x0, 0x10000a006) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x2fc, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x26c, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d5c0033f802ee9f29a5f9fdda3331aad1067a6316cede6147994d6952f4ca2d3"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x188, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c91ced16e803bab6de67cd4feb5a8d14c498b3cd0dfcc27f671e71162fc0afcd"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7d5cfa1fa932e154bee7f6860f859d9db06d8f93e64aac842abd03b3ac3da740"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x200}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @mcast2, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a05d06b996c69ff555d44d5fa743f884bef10fe4ba302ba691e1bf9d5bc3b992"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000754000/0x1000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r8, @ANYBLOB="01bade000000000004003b1c210008000300", @ANYRES32=r7, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) (async) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r5, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000004c0)=ANY=[@ANYBLOB="002a000000000000009f9296b32281d3d1c690c30bee35cc7b79c8aaba75e5deabc388e18ba49273e69d2f887dd28e43ae755f6ae0c573227121ed69fc0eacd66ec63c7e316ea882e61c48827e0c1ee22e1657dc2090ee0251de38af73265013bc85e0863140335919e4d1ebc310167409a95c27013197f61bf77e96b3063ffc522814533b8ff4bbb828acca6edcc650a67530b3399f52d4b6fbc65aab3dfbec12d6160448d0025f9ad23c3a7d53f809f53ac19acf3e4a4ac86abcef0b00010007200000000006000000000000000000000000000000000000000000000000000000c910fe7800000000000000000000000000bb0076474de4f0a33aefb8758651f4031ce7badd2601590735b39e0e8020cb8b9d352128cff74db925f0f088a605ea1db63091aaee4c21f8eabf6d77afbdf9ec22185226fb2df7b7a7478af9bd8b19eb4cffc17da0efeb736c681d338cbc9f6cd4e764ca75cfdf0bb8be4396463219"], 0x158) (async) sendfile(r10, r9, 0x0, 0x10000a006) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x2fc, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x26c, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d5c0033f802ee9f29a5f9fdda3331aad1067a6316cede6147994d6952f4ca2d3"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x188, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c91ced16e803bab6de67cd4feb5a8d14c498b3cd0dfcc27f671e71162fc0afcd"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7d5cfa1fa932e154bee7f6860f859d9db06d8f93e64aac842abd03b3ac3da740"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x200}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @mcast2, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a05d06b996c69ff555d44d5fa743f884bef10fe4ba302ba691e1bf9d5bc3b992"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:55:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 455.852318][T15733] input: syz0 as /devices/virtual/input/input1845 18:55:40 executing program 5: mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:40 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 456.250206][T15755] input: syz0 as /devices/virtual/input/input1846 [ 456.280266][T15761] input: syz0 as /devices/virtual/input/input1847 18:55:40 executing program 5: mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:40 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:40 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) copy_file_range(r4, &(0x7f0000000040)=0x772, r5, &(0x7f0000000100)=0x5, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:40 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:40 executing program 5: mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 456.612373][T15776] input: syz0 as /devices/virtual/input/input1848 [ 456.626919][T15777] input: syz0 as /devices/virtual/input/input1849 18:55:40 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 456.962414][T15787] input: syz0 as /devices/virtual/input/input1850 [ 457.007520][T15789] input: syz0 as /devices/virtual/input/input1851 18:55:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:41 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (rerun: 32) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 64) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:41 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) copy_file_range(r4, &(0x7f0000000040)=0x772, r5, &(0x7f0000000100)=0x5, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 457.202733][T15799] input: syz0 as /devices/virtual/input/input1852 [ 457.242664][T15806] input: syz0 as /devices/virtual/input/input1853 18:55:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 457.366929][T15816] input: syz0 as /devices/virtual/input/input1854 [ 457.406971][T15818] input: syz0 as /devices/virtual/input/input1855 18:55:41 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) copy_file_range(r4, &(0x7f0000000040)=0x772, r5, &(0x7f0000000100)=0x5, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) copy_file_range(r4, &(0x7f0000000040)=0x772, r5, &(0x7f0000000100)=0x5, 0x8, 0x0) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:55:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 457.567241][T15825] input: syz0 as /devices/virtual/input/input1856 18:55:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:41 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:41 executing program 1: sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="a4010000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fedbdf250e0000009001068004000200040002004400040067636d28616573290000000000000000000000000000000000000000000000001c00000078edb870e4baecd9a255e86f926a350158d838b6e2c5e3a307f7b2df76000300ba789323f56ee3d67f7ac166571b691812bef76f7885d9acde8e8f2f55c8b1774af12a68258165976bd778d6c4ca70905572b7df1f84e8390a35c539469720fe32c3e8ed5d810982399fb642286c6fc3f2b6d676118135306d4c96f25151987a0de00100d29c5692cf861f2b61a473a633b70000040002004000040067636d286165732900000000000000000000000000000000000000000000000018000000eb6ef5e869f2571b034d080d16d8f9a1165b72568ca87b5b40002901000000000000000000000000000000000000000000000018000000a10f0f1bec24109658c79d8d653ffc5d88489e0bbd1cef694400040067636d28616573290000000000000000000000000000000000000000000000001c0000000cd225aee7c628b704bdfe7a79568081e684d3a060460744d3ea9edc9af1fe8502cbe11c63bb9cdfa05780efe32bd820bacf87208cf268418819c0921f506513600c13dc46261cc56a3417b925e5ac301d7376d7923b468b492d754b1c3255c400c9c927fcf7dd863a2d5ab110b59ac8f917357f722d9935cce40ae8ecbd788cc2049c843d55268ba5d7e759b1e02c36e47fa5b09438d8139a3133"], 0x1a4}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 457.959613][T15834] input: syz0 as /devices/virtual/input/input1857 [ 457.999355][T15837] input: syz0 as /devices/virtual/input/input1858 18:55:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:42 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:42 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r6 = socket$inet6(0xa, 0x806, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000001c0)={0x0, 0x2, 0x6}) syz_io_uring_submit(r4, r5, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r6, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r8, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x0, 0x0, 0x1}, 0xff) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r9, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 458.213458][T15854] input: syz0 as /devices/virtual/input/input1859 [ 458.255834][T15855] input: syz0 as /devices/virtual/input/input1860 18:55:42 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 458.461525][T15863] input: syz0 as /devices/virtual/input/input1861 18:55:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:42 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) r6 = socket$inet6(0xa, 0x806, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000001c0)={0x0, 0x2, 0x6}) (async) syz_io_uring_submit(r4, r5, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r6, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) (rerun: 64) syz_io_uring_submit(r4, r7, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r8, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x0, 0x0, 0x1}, 0xff) (async) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r9, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:42 executing program 1: sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="a4010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 32) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:42 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 458.888798][T15871] input: syz0 as /devices/virtual/input/input1862 [ 458.907990][T15872] input: syz0 as /devices/virtual/input/input1863 18:55:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:42 executing program 1: sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="a4010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:42 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 459.097510][T15887] input: syz0 as /devices/virtual/input/input1864 18:55:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 459.142387][T15890] input: syz0 as /devices/virtual/input/input1865 18:55:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:43 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd_index, 0xffffffffffff9f89, 0x5, 0x7fff, 0x10, 0x1, {0x3, r3}}, 0x40) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x240000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000004c0)={0x10201, 0x1, 0x6000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x2, 0x200000ce, r6) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r10 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r10, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_submit(r8, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r4, &(0x7f00000001c0)={0x2, 0x1, 0x6}, &(0x7f0000000340)='./file0\x00', 0x18}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:43 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, 0x0, 0x700) 18:55:43 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) r6 = socket$inet6(0xa, 0x806, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000001c0)={0x0, 0x2, 0x6}) (async) syz_io_uring_submit(r4, r5, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r6, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r8, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x0, 0x0, 0x1}, 0xff) (async) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r9, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 459.811438][T15907] input: syz0 as /devices/virtual/input/input1867 [ 459.818625][T15909] input: syz0 as /devices/virtual/input/input1866 18:55:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, 0x0, 0x700) 18:55:43 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd_index, 0xffffffffffff9f89, 0x5, 0x7fff, 0x10, 0x1, {0x3, r3}}, 0x40) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x240000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000004c0)={0x10201, 0x1, 0x6000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x2, 0x200000ce, r6) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r10 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r10, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_submit(r8, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r4, &(0x7f00000001c0)={0x2, 0x1, 0x6}, &(0x7f0000000340)='./file0\x00', 0x18}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd_index, 0xffffffffffff9f89, 0x5, 0x7fff, 0x10, 0x1, {0x3, r3}}, 0x40) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x240000, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000004c0)={0x10201, 0x1, 0x6000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) io_uring_setup(0x3b81, &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x2, 0x200000ce, r6) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r8, r9, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r10, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r8, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r4, &(0x7f00000001c0)={0x2, 0x1, 0x6}, &(0x7f0000000340)='./file0\x00', 0x18}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:55:43 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:43 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0xfba, &(0x7f00000000c0)={0x0, 0x15a0, 0x1, 0x2, 0x31f, 0x0, r5}, &(0x7f000042b000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 459.994885][T15924] input: syz0 as /devices/virtual/input/input1868 18:55:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, 0x0, 0x700) [ 460.037379][T15927] input: syz0 as /devices/virtual/input/input1869 18:55:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:44 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) 18:55:44 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd_index, 0xffffffffffff9f89, 0x5, 0x7fff, 0x10, 0x1, {0x3, r3}}, 0x40) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x240000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000004c0)={0x10201, 0x1, 0x6000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x2, 0x200000ce, r6) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r10 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r10, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_submit(r8, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r4, &(0x7f00000001c0)={0x2, 0x1, 0x6}, &(0x7f0000000340)='./file0\x00', 0x18}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd_index, 0xffffffffffff9f89, 0x5, 0x7fff, 0x10, 0x1, {0x3, r3}}, 0x40) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x240000, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000004c0)={0x10201, 0x1, 0x6000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) io_uring_setup(0x3b81, &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x2, 0x200000ce, r6) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r8, r9, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r10, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r8, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r4, &(0x7f00000001c0)={0x2, 0x1, 0x6}, &(0x7f0000000340)='./file0\x00', 0x18}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:55:44 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0xfba, &(0x7f00000000c0)={0x0, 0x15a0, 0x1, 0x2, 0x31f, 0x0, r5}, &(0x7f000042b000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000240)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) syz_io_uring_setup(0xfba, &(0x7f00000000c0)={0x0, 0x15a0, 0x1, 0x2, 0x31f, 0x0, r5}, &(0x7f000042b000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) [ 460.768250][T15953] input: syz0 as /devices/virtual/input/input1870 [ 460.776567][T15957] input: syz0 as /devices/virtual/input/input1871 18:55:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) 18:55:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:44 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) [ 461.084143][T15981] input: syz0 as /devices/virtual/input/input1872 18:55:45 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000040)) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 461.150029][T15982] input: syz0 as /devices/virtual/input/input1873 18:55:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)}, 0x700) 18:55:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)}, 0x700) 18:55:45 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0xfba, &(0x7f00000000c0)={0x0, 0x15a0, 0x1, 0x2, 0x31f, 0x0, r5}, &(0x7f000042b000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000240)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) syz_io_uring_setup(0xfba, &(0x7f00000000c0)={0x0, 0x15a0, 0x1, 0x2, 0x31f, 0x0, r5}, &(0x7f000042b000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) [ 461.725127][T15996] input: syz0 as /devices/virtual/input/input1875 [ 461.749399][T15997] input: syz0 as /devices/virtual/input/input1874 18:55:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)}, 0x700) 18:55:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:45 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (async) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000040)) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x700) [ 461.994980][T16015] input: syz0 as /devices/virtual/input/input1876 [ 462.035877][T16016] input: syz0 as /devices/virtual/input/input1877 18:55:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:46 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000040)) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x700) [ 462.294464][T16027] input: syz0 as /devices/virtual/input/input1878 [ 462.315902][T16030] input: syz0 as /devices/virtual/input/input1879 18:55:46 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:46 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x2, 0xff, 0x20, 0x5, 0x0, 0xe8, 0x84, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0xd20, 0x1, 0x80000000, 0x2, 0x401, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x1}, 0x0, 0xd, r5, 0x9) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 462.628725][T16041] input: syz0 as /devices/virtual/input/input1880 [ 462.642796][T16042] input: syz0 as /devices/virtual/input/input1881 18:55:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x700) 18:55:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:47 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:55:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x0) 18:55:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x0) [ 463.233103][T16060] input: syz0 as /devices/virtual/input/input1882 [ 463.244379][T16063] input: syz0 as /devices/virtual/input/input1883 18:55:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 463.344406][T16054] warn_alloc: 1 callbacks suppressed 18:55:47 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x2, 0xff, 0x20, 0x5, 0x0, 0xe8, 0x84, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0xd20, 0x1, 0x80000000, 0x2, 0x401, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x1}, 0x0, 0xd, r5, 0x9) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 463.344420][T16054] syz-executor.1: vmalloc error: size 8192, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 463.511864][T16054] CPU: 0 PID: 16054 Comm: syz-executor.1 Not tainted 5.16.0-rc5-syzkaller #0 [ 463.520677][T16054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.530915][T16054] Call Trace: [ 463.534203][T16054] [ 463.537142][T16054] dump_stack_lvl+0x201/0x2d8 [ 463.541836][T16054] ? show_regs_print_info+0x12/0x12 [ 463.547044][T16054] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 463.552791][T16054] warn_alloc+0x221/0x370 [ 463.557133][T16054] ? zone_watermark_ok_safe+0x280/0x280 [ 463.562697][T16054] ? alloc_pages+0x44a/0x560 [ 463.567304][T16054] __vmalloc_node_range+0x7c5/0x960 [ 463.572528][T16054] dup_task_struct+0x65d/0x9a0 [ 463.577302][T16054] ? copy_process+0x64d/0x5ca0 [ 463.582071][T16054] ? _raw_spin_unlock_irq+0x1f/0x40 [ 463.587278][T16054] ? lockdep_hardirqs_on+0x95/0x140 [ 463.592491][T16054] copy_process+0x64d/0x5ca0 [ 463.597105][T16054] ? _raw_spin_unlock+0x24/0x40 [ 463.601965][T16054] ? do_anonymous_page+0xe26/0x14f0 [ 463.607185][T16054] ? __lock_acquire+0x1382/0x2b00 [ 463.612226][T16054] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 463.617361][T16054] kernel_clone+0x22a/0x7e0 [ 463.621819][T16079] input: syz0 as /devices/virtual/input/input1884 [ 463.621880][T16054] ? create_io_thread+0x1d0/0x1d0 [ 463.633304][T16054] ? __context_tracking_exit+0x7a/0xd0 [ 463.638776][T16054] __x64_sys_clone+0x245/0x2b0 [ 463.643548][T16054] ? __do_sys_vfork+0x130/0x130 [ 463.648395][T16054] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 463.654384][T16054] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 463.660352][T16054] ? lockdep_hardirqs_on+0x95/0x140 [ 463.665544][T16054] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 463.671516][T16054] do_syscall_64+0x44/0xd0 [ 463.675931][T16054] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 463.681815][T16054] RIP: 0033:0x7fbaaec1b2c1 [ 463.686219][T16054] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 18:55:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xe48a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x0) 18:55:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 463.705816][T16054] RSP: 002b:00007ffecdf9d738 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 463.714222][T16054] RAX: ffffffffffffffda RBX: 00007fbaad4a8700 RCX: 00007fbaaec1b2c1 [ 463.722185][T16054] RDX: 00007fbaad4a89d0 RSI: 00007fbaad4a82f0 RDI: 00000000003d0f00 [ 463.730146][T16054] RBP: 00007ffecdf9d980 R08: 00007fbaad4a8700 R09: 00007fbaad4a8700 [ 463.738112][T16054] R10: 00007fbaad4a89d0 R11: 0000000000000206 R12: 00007ffecdf9d7ee [ 463.746068][T16054] R13: 00007ffecdf9d7ef R14: 00007fbaad4a8300 R15: 0000000000022000 [ 463.754044][T16054] 18:55:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 463.809210][T16086] input: syz0 as /devices/virtual/input/input1885 18:55:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 463.925258][T16054] Mem-Info: [ 463.928861][T16054] active_anon:510 inactive_anon:222337 isolated_anon:275 [ 463.928861][T16054] active_file:3926 inactive_file:44647 isolated_file:0 [ 463.928861][T16054] unevictable:768 dirty:44 writeback:0 [ 463.928861][T16054] slab_reclaimable:19660 slab_unreclaimable:98919 [ 463.928861][T16054] mapped:27964 shmem:5048 pagetables:1718 bounce:0 [ 463.928861][T16054] kernel_misc_reclaimable:0 [ 463.928861][T16054] free:1204747 free_pcp:11241 free_cma:0 [ 463.998729][T16092] input: syz0 as /devices/virtual/input/input1886 [ 464.005731][T16091] input: syz0 as /devices/virtual/input/input1887 [ 464.043562][T16054] Node 0 active_anon:2036kB inactive_anon:890628kB active_file:15632kB inactive_file:178588kB unevictable:1536kB isolated(anon):900kB isolated(file):0kB mapped:111856kB dirty:172kB writeback:0kB shmem:17928kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 870400kB writeback_tmp:0kB kernel_stack:12172kB pagetables:6768kB all_unreclaimable? no [ 464.100646][T16054] Node 1 active_anon:4kB inactive_anon:724kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 464.158523][T16054] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 464.187144][T16054] lowmem_reserve[]: 0 2635 2636 2636 2636 [ 464.193366][T16054] Node 0 DMA32 free:856064kB boost:0kB min:35588kB low:44484kB high:53380kB reserved_highatomic:0KB active_anon:2036kB inactive_anon:888536kB active_file:15632kB inactive_file:178588kB unevictable:1536kB writepending:172kB present:3129332kB managed:2705612kB mlocked:0kB bounce:0kB free_pcp:43648kB local_pcp:22200kB free_cma:0kB [ 464.236330][T16054] lowmem_reserve[]: 0 0 1 1 1 [ 464.241537][T16054] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 464.279647][T16054] lowmem_reserve[]: 0 0 0 0 0 [ 464.285360][T16054] Node 1 Normal free:3947696kB boost:0kB min:54300kB low:67872kB high:81444kB reserved_highatomic:0KB active_anon:4kB inactive_anon:724kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:1684kB local_pcp:0kB free_cma:0kB [ 464.315119][T16054] lowmem_reserve[]: 0 0 0 0 0 [ 464.321271][T16054] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 464.335345][T16054] Node 0 DMA32: 5446*4kB (UME) 3325*8kB (UME) 2778*16kB (UME) 1312*32kB (UME) 719*64kB (UME) 151*128kB (UM) 30*256kB (UM) 14*512kB (UME) 8*1024kB (UME) 7*2048kB (UM) 151*4096kB (UM) = 856032kB [ 464.358589][T16054] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 464.371198][T16054] Node 1 Normal: 132*4kB (UE) 30*8kB (UME) 27*16kB (UME) 160*32kB (UE) 84*64kB (UME) 22*128kB (UE) 6*256kB (UME) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (UE) 958*4096kB (M) = 3947696kB [ 464.389606][T16054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.399687][T16054] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 464.409615][T16054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.419567][T16054] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 464.429954][T16054] 16687 total pagecache pages [ 464.434733][T16054] 0 pages in swap cache [ 464.439376][T16054] Swap cache stats: add 0, delete 0, find 0/0 [ 464.445502][T16054] Free swap = 0kB [ 464.449635][T16054] Total swap = 0kB [ 464.453437][T16054] 2097051 pages RAM 18:55:48 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (rerun: 64) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) (async, rerun: 64) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:48 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:48 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x2, 0xff, 0x20, 0x5, 0x0, 0xe8, 0x84, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0xd20, 0x1, 0x80000000, 0x2, 0x401, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x1}, 0x0, 0xd, r5, 0x9) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 464.457327][T16054] 0 pages HighMem/MovableOnly [ 464.465646][T16054] 387047 pages reserved [ 464.470915][T16054] 0 pages cma reserved 18:55:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 464.557017][T16104] input: syz0 as /devices/virtual/input/input1888 [ 464.583215][T16107] input: syz0 as /devices/virtual/input/input1889 18:55:48 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7adc, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r8 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r8, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000340), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r9, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r12 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r12, 0x2, 0x200000ce, r11) syz_io_uring_submit(0x0, r9, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0, 0x9, 0x0, 0x4, 0x0, 0x0, {0x0, r11}}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:48 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 464.739935][T16120] input: syz0 as /devices/virtual/input/input1890 [ 464.774106][T16123] input: syz0 as /devices/virtual/input/input1891 18:55:48 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:48 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r7 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:48 executing program 4: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) r6 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00006d8000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r9 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d8000/0x3000)=nil, 0x3000, 0x8, 0x12, r6, 0x8000000) r12 = mmap$IORING_OFF_SQES(&(0x7f00000bf000/0x2000)=nil, 0x2000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, r9, &(0x7f0000000340), &(0x7f0000000100)='./file0\x00', 0x1}, 0x5) syz_io_uring_submit(r7, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x6, 0x80000000, {0x0, r5}, 0x101, 0x1, 0x0, {0x0, 0x0, r3}}, 0xfff) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 464.965044][T16133] input: syz0 as /devices/virtual/input/input1892 [ 465.000288][T16137] input: syz0 as /devices/virtual/input/input1893 18:55:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:48 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:49 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x7adc, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) r8 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r8, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000340), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r9, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r10 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) (async) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r12 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r12, 0x2, 0x200000ce, r11) (async) syz_io_uring_submit(0x0, r9, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0, 0x9, 0x0, 0x4, 0x0, 0x0, {0x0, r11}}, 0x8) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 465.263536][T16146] input: syz0 as /devices/virtual/input/input1894 [ 465.353643][T16150] input: syz0 as /devices/virtual/input/input1895 18:55:49 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:49 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r7 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:55:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 465.626394][T16158] input: syz0 as /devices/virtual/input/input1896 [ 465.700433][T16161] input: syz0 as /devices/virtual/input/input1897 18:55:49 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:49 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7adc, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) r8 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r8, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000340), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r9, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r10 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) (async) r12 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r12, 0x2, 0x200000ce, r11) syz_io_uring_submit(0x0, r9, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0, 0x9, 0x0, 0x4, 0x0, 0x0, {0x0, r11}}, 0x8) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:49 executing program 4: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x2, 0x200000ce, r5) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x0, {0x0, r5}}, 0x101) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 465.940453][T16172] input: syz0 as /devices/virtual/input/input1898 [ 466.053110][T16178] input: syz0 as /devices/virtual/input/input1899 18:55:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 466.330263][T16188] input: syz0 as /devices/virtual/input/input1900 18:55:50 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r7 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:50 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r5 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000001c0)='\x00', 0x7, 0x6, &(0x7f0000000680)=[{&(0x7f0000000240)="5c5d0b01b4c38546ca24a0b4ab4def5180b4c4acecc7d6e3f4f6840cf85d3a40d1c0c2d3e3c4cc8c5c6f9bcd4f9e7913eed1", 0x32, 0x4c}, {&(0x7f0000000340)="dcff563138c8d34e0159eb69b2a16643ff54357c161aaaae9aa5d7b055a0c33d5763f4dfd443a0c0843729e2a8a84a77df4f2720a9f67bf8e6723bb6f733218416df89b869b461e79410f34fae698e47691f7906e8b9ffafed769af792ab0c76dab8846380af7fc484a1c25473981fdb82669c7f2b46dd63a62b10f8846ecbd3280baf91ed749388c026c89cbe6e0c8232d6f484c207d280dcf1a053ef01aabb06a218b0", 0xa4, 0x101}, {&(0x7f0000000400)="b9e068270c9cc3ad9b9b654ce08aa91105f0a4c2145af3f810c0068b025fc135a37e2feef73da269a82dc7ecf316a559d7fbc8c5f3fc3c064775ee16f50a17bfd68897a16f3ae3e09fde69724a66283a0668a88a23ce39842c04f8ea2c87d8ed4b7d22dc958be8656202ebf96cf0e17c03183cf7b4ec7ab71ddcc850182a74f08d0ffeb16313c02107cb7ce5e015cc32bb4cc18001b0233b56b25dc519232db9e98b1d763d9aee3a2878437aedd3f5438ae2cdd92f3186440963d30af7b2f17d4b3d7a0db63433c420205fdac23cde5e0dffc87f45552ee5b03c0e27e364", 0xde, 0xa1f}, {&(0x7f0000000500)="22038e56c67e78e15aa04b9015cdb99bf3e480c4bfb49973c117f1e6262552086da43a955cc03ca550fa51e9995066c6250f67ff1c3ffb561a6da773d552f02e2b4409c6fffa50d7980e76ff877b3ceb433b01549cb603fc0ff657cb1e6b928f192cf485cc68d38b8ca2c57bc1d786f98b994866e3aff6f9504a1f020b0bd0ec6a55bd9cb7fdafed288cb4ec6807bd45c36e049fbdf237aca1a4cde745", 0x9d, 0xfffffffffffffff7}, {&(0x7f00000005c0)="ee0d69e7121cf70e9d5492e1ca9f60a9aca129a1561a111e", 0x18, 0x63b}, {&(0x7f0000000600)="16b68e681dcc6fd3b60d76799c65568596a9cee2220eab47a0eeb8fe79e2a70792418895de0195097765e0a49604a4e586a985de18a765fe2561a82380629a5b29b56e381c9f3dcf3aff0a989e49162ce26fa20a6b0a1cb5739a", 0x5a, 0x100}], 0x20, &(0x7f0000000740)={[{@undelete}, {@anchor={'anchor', 0x3d, 0x7fff}}, {@shortad}, {@bs={'bs', 0x3d, 0xff}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@utf8}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x17}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}) syz_io_uring_submit(0x0, r6, &(0x7f0000000840)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000800)='./file0\x00', 0x94, 0x44000, 0x23456}, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) clone(0x4000000, &(0x7f0000000040)="5b7129da75455c3bb36f9061569284a311dd0def8aec5e785b8517fd2b16dc2da83ac41057d19c860a6369df1bfd0ef35740e8db", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000001340)="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") r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r8, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 466.440345][T16192] input: syz0 as /devices/virtual/input/input1901 18:55:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 466.514289][T16199] input: syz0 as /devices/virtual/input/input1902 [ 466.540341][T16196] loop0: detected capacity change from 0 to 16383 18:55:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:50 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x23}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 466.697649][T16206] input: syz0 as /devices/virtual/input/input1903 [ 466.763128][T16209] input: syz0 as /devices/virtual/input/input1904 18:55:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:50 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x23}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 467.018185][T16218] input: syz0 as /devices/virtual/input/input1905 [ 467.101081][T16222] input: syz0 as /devices/virtual/input/input1906 18:55:51 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) r5 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r7 = syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000001c0)='\x00', 0x7, 0x6, &(0x7f0000000680)=[{&(0x7f0000000240)="5c5d0b01b4c38546ca24a0b4ab4def5180b4c4acecc7d6e3f4f6840cf85d3a40d1c0c2d3e3c4cc8c5c6f9bcd4f9e7913eed1", 0x32, 0x4c}, {&(0x7f0000000340)="dcff563138c8d34e0159eb69b2a16643ff54357c161aaaae9aa5d7b055a0c33d5763f4dfd443a0c0843729e2a8a84a77df4f2720a9f67bf8e6723bb6f733218416df89b869b461e79410f34fae698e47691f7906e8b9ffafed769af792ab0c76dab8846380af7fc484a1c25473981fdb82669c7f2b46dd63a62b10f8846ecbd3280baf91ed749388c026c89cbe6e0c8232d6f484c207d280dcf1a053ef01aabb06a218b0", 0xa4, 0x101}, {&(0x7f0000000400)="b9e068270c9cc3ad9b9b654ce08aa91105f0a4c2145af3f810c0068b025fc135a37e2feef73da269a82dc7ecf316a559d7fbc8c5f3fc3c064775ee16f50a17bfd68897a16f3ae3e09fde69724a66283a0668a88a23ce39842c04f8ea2c87d8ed4b7d22dc958be8656202ebf96cf0e17c03183cf7b4ec7ab71ddcc850182a74f08d0ffeb16313c02107cb7ce5e015cc32bb4cc18001b0233b56b25dc519232db9e98b1d763d9aee3a2878437aedd3f5438ae2cdd92f3186440963d30af7b2f17d4b3d7a0db63433c420205fdac23cde5e0dffc87f45552ee5b03c0e27e364", 0xde, 0xa1f}, {&(0x7f0000000500)="22038e56c67e78e15aa04b9015cdb99bf3e480c4bfb49973c117f1e6262552086da43a955cc03ca550fa51e9995066c6250f67ff1c3ffb561a6da773d552f02e2b4409c6fffa50d7980e76ff877b3ceb433b01549cb603fc0ff657cb1e6b928f192cf485cc68d38b8ca2c57bc1d786f98b994866e3aff6f9504a1f020b0bd0ec6a55bd9cb7fdafed288cb4ec6807bd45c36e049fbdf237aca1a4cde745", 0x9d, 0xfffffffffffffff7}, {&(0x7f00000005c0)="ee0d69e7121cf70e9d5492e1ca9f60a9aca129a1561a111e", 0x18, 0x63b}, {&(0x7f0000000600)="16b68e681dcc6fd3b60d76799c65568596a9cee2220eab47a0eeb8fe79e2a70792418895de0195097765e0a49604a4e586a985de18a765fe2561a82380629a5b29b56e381c9f3dcf3aff0a989e49162ce26fa20a6b0a1cb5739a", 0x5a, 0x100}], 0x20, &(0x7f0000000740)={[{@undelete}, {@anchor={'anchor', 0x3d, 0x7fff}}, {@shortad}, {@bs={'bs', 0x3d, 0xff}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@utf8}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x17}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}) syz_io_uring_submit(0x0, r6, &(0x7f0000000840)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000800)='./file0\x00', 0x94, 0x44000, 0x23456}, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) clone(0x4000000, &(0x7f0000000040)="5b7129da75455c3bb36f9061569284a311dd0def8aec5e785b8517fd2b16dc2da83ac41057d19c860a6369df1bfd0ef35740e8db", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000001340)="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") (async) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r8, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:51 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x23}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 467.372772][T16232] input: syz0 as /devices/virtual/input/input1907 18:55:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 467.413347][T16235] input: syz0 as /devices/virtual/input/input1908 18:55:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 467.463714][T16241] loop0: detected capacity change from 0 to 16383 [ 467.600754][T16245] input: syz0 as /devices/virtual/input/input1909 18:55:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:51 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r5 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) r6 = syz_io_uring_setup(0x10a5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x191}, &(0x7f00000c1000/0x3000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r10 = socket$inet6(0xa, 0x806, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x10001}}, './file0\x00'}) connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) syz_io_uring_submit(r8, r9, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r10, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r9, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r13, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:51 executing program 4: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r5 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000001c0)='\x00', 0x7, 0x6, &(0x7f0000000680)=[{&(0x7f0000000240)="5c5d0b01b4c38546ca24a0b4ab4def5180b4c4acecc7d6e3f4f6840cf85d3a40d1c0c2d3e3c4cc8c5c6f9bcd4f9e7913eed1", 0x32, 0x4c}, {&(0x7f0000000340)="dcff563138c8d34e0159eb69b2a16643ff54357c161aaaae9aa5d7b055a0c33d5763f4dfd443a0c0843729e2a8a84a77df4f2720a9f67bf8e6723bb6f733218416df89b869b461e79410f34fae698e47691f7906e8b9ffafed769af792ab0c76dab8846380af7fc484a1c25473981fdb82669c7f2b46dd63a62b10f8846ecbd3280baf91ed749388c026c89cbe6e0c8232d6f484c207d280dcf1a053ef01aabb06a218b0", 0xa4, 0x101}, {&(0x7f0000000400)="b9e068270c9cc3ad9b9b654ce08aa91105f0a4c2145af3f810c0068b025fc135a37e2feef73da269a82dc7ecf316a559d7fbc8c5f3fc3c064775ee16f50a17bfd68897a16f3ae3e09fde69724a66283a0668a88a23ce39842c04f8ea2c87d8ed4b7d22dc958be8656202ebf96cf0e17c03183cf7b4ec7ab71ddcc850182a74f08d0ffeb16313c02107cb7ce5e015cc32bb4cc18001b0233b56b25dc519232db9e98b1d763d9aee3a2878437aedd3f5438ae2cdd92f3186440963d30af7b2f17d4b3d7a0db63433c420205fdac23cde5e0dffc87f45552ee5b03c0e27e364", 0xde, 0xa1f}, {&(0x7f0000000500)="22038e56c67e78e15aa04b9015cdb99bf3e480c4bfb49973c117f1e6262552086da43a955cc03ca550fa51e9995066c6250f67ff1c3ffb561a6da773d552f02e2b4409c6fffa50d7980e76ff877b3ceb433b01549cb603fc0ff657cb1e6b928f192cf485cc68d38b8ca2c57bc1d786f98b994866e3aff6f9504a1f020b0bd0ec6a55bd9cb7fdafed288cb4ec6807bd45c36e049fbdf237aca1a4cde745", 0x9d, 0xfffffffffffffff7}, {&(0x7f00000005c0)="ee0d69e7121cf70e9d5492e1ca9f60a9aca129a1561a111e", 0x18, 0x63b}, {&(0x7f0000000600)="16b68e681dcc6fd3b60d76799c65568596a9cee2220eab47a0eeb8fe79e2a70792418895de0195097765e0a49604a4e586a985de18a765fe2561a82380629a5b29b56e381c9f3dcf3aff0a989e49162ce26fa20a6b0a1cb5739a", 0x5a, 0x100}], 0x20, &(0x7f0000000740)={[{@undelete}, {@anchor={'anchor', 0x3d, 0x7fff}}, {@shortad}, {@bs={'bs', 0x3d, 0xff}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@utf8}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x17}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}) syz_io_uring_submit(0x0, r6, &(0x7f0000000840)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000800)='./file0\x00', 0x94, 0x44000, 0x23456}, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) clone(0x4000000, &(0x7f0000000040)="5b7129da75455c3bb36f9061569284a311dd0def8aec5e785b8517fd2b16dc2da83ac41057d19c860a6369df1bfd0ef35740e8db", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000001340)="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") r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r8, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:51 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r5 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000001c0)='\x00', 0x7, 0x6, &(0x7f0000000680)=[{&(0x7f0000000240)="5c5d0b01b4c38546ca24a0b4ab4def5180b4c4acecc7d6e3f4f6840cf85d3a40d1c0c2d3e3c4cc8c5c6f9bcd4f9e7913eed1", 0x32, 0x4c}, {&(0x7f0000000340)="dcff563138c8d34e0159eb69b2a16643ff54357c161aaaae9aa5d7b055a0c33d5763f4dfd443a0c0843729e2a8a84a77df4f2720a9f67bf8e6723bb6f733218416df89b869b461e79410f34fae698e47691f7906e8b9ffafed769af792ab0c76dab8846380af7fc484a1c25473981fdb82669c7f2b46dd63a62b10f8846ecbd3280baf91ed749388c026c89cbe6e0c8232d6f484c207d280dcf1a053ef01aabb06a218b0", 0xa4, 0x101}, {&(0x7f0000000400)="b9e068270c9cc3ad9b9b654ce08aa91105f0a4c2145af3f810c0068b025fc135a37e2feef73da269a82dc7ecf316a559d7fbc8c5f3fc3c064775ee16f50a17bfd68897a16f3ae3e09fde69724a66283a0668a88a23ce39842c04f8ea2c87d8ed4b7d22dc958be8656202ebf96cf0e17c03183cf7b4ec7ab71ddcc850182a74f08d0ffeb16313c02107cb7ce5e015cc32bb4cc18001b0233b56b25dc519232db9e98b1d763d9aee3a2878437aedd3f5438ae2cdd92f3186440963d30af7b2f17d4b3d7a0db63433c420205fdac23cde5e0dffc87f45552ee5b03c0e27e364", 0xde, 0xa1f}, {&(0x7f0000000500)="22038e56c67e78e15aa04b9015cdb99bf3e480c4bfb49973c117f1e6262552086da43a955cc03ca550fa51e9995066c6250f67ff1c3ffb561a6da773d552f02e2b4409c6fffa50d7980e76ff877b3ceb433b01549cb603fc0ff657cb1e6b928f192cf485cc68d38b8ca2c57bc1d786f98b994866e3aff6f9504a1f020b0bd0ec6a55bd9cb7fdafed288cb4ec6807bd45c36e049fbdf237aca1a4cde745", 0x9d, 0xfffffffffffffff7}, {&(0x7f00000005c0)="ee0d69e7121cf70e9d5492e1ca9f60a9aca129a1561a111e", 0x18, 0x63b}, {&(0x7f0000000600)="16b68e681dcc6fd3b60d76799c65568596a9cee2220eab47a0eeb8fe79e2a70792418895de0195097765e0a49604a4e586a985de18a765fe2561a82380629a5b29b56e381c9f3dcf3aff0a989e49162ce26fa20a6b0a1cb5739a", 0x5a, 0x100}], 0x20, &(0x7f0000000740)={[{@undelete}, {@anchor={'anchor', 0x3d, 0x7fff}}, {@shortad}, {@bs={'bs', 0x3d, 0xff}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@utf8}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x17}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}) syz_io_uring_submit(0x0, r6, &(0x7f0000000840)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000800)='./file0\x00', 0x94, 0x44000, 0x23456}, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) clone(0x4000000, &(0x7f0000000040)="5b7129da75455c3bb36f9061569284a311dd0def8aec5e785b8517fd2b16dc2da83ac41057d19c860a6369df1bfd0ef35740e8db", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000001340)="8158aae3257df36be8d0e017a82fcb63108ce27428e15d19e8dd6ac0c052794d60df276664d3bfdc084f45c23ae1c555de5872411b2674cd0c6c1fa984dde84c98c9e823e01a3d8fe186c736f7d73ddd39a996fc0891c21d765d6ed2f0f5fc3989f3e21253ebc68b0ddd8b79a614c268d25640fe6c735a8d51eaa036c0402872d4b7708bce6011a321e2a404e3fab31056b9c2b7d58d1b6a5c959c4a32545f87551dbae86668c7496b782bc90350ccdeef5ad9ced363552fa43a7fc8c4015dc8b269baae418cab3393e0e876b2749338046605ed8d8d847f7225741359936c7bc466e409785b874a3fd386bbcc1c24c8488fd4509adaff36ad8a9ef7f20350e68ba8706e76d0b5f37957e9da1214fa53c2f6ef8236e996e4f8b9bcf5092c19fab4608256f65aa6c24d9d8e9416f828b10a586d865a700a1c9659cb3371c099c21ed9bb293d70f51d07d1176e619518776862e977e5577d72b736537f5fedeac0fdc13f788eed0308a5f961a3284978f42f7235fa9b2b660e9ca15305cd6e6006891ddab3f4da9134009fe420c3986e50b522208560c7eccca0910d1e2b2a53b33621db156afa97f6f8923ca0f137205cb88ac84f6b80e4c9a541978e2e69179a8061f8e3a05c7ce4b8640f4a4f99cc2d360f3bde7bbfae5d7f6af8e174ac272e2a4c50d62ebffdc06365cb8d0d2b11bf6fdf219f6f312b3013eefc97fcd919c2d0d58a510eec6bccb76b432b65d6e925dd7cdfae0c20e328ac09dbf9ef3e32f9860c61c11c6a45080ed32f025144df898a15b614db9a6b84d03d277bf28f54adc908838463881945e1a7b09ccff8cbfd2cfdf5b93730c73606e38b7501f77899cf12460ff4d9c36542984efcae2a51fb4ddf35685aec06ece610ba21f6a297d8d456d89ace5a076e5de1638ee792c33f5ffb5ff6d969a89ea11f4868feabe506199e45019f9d57cd5367c705f668078d5ccc1ee3a72c180e5466642c96ee70a94f9b9c1c3a310cf1a630ba3da3f0d2e9f1c0606557fae9cdcf589ad08b780ca1e5a69a093f8c63cf40236fdbdb27bc7de8ed03256449295955ffaffde16db267dc2ac78808367b96a93fb8ffe7c9b8081daaa45eb5631c10063733072dc29e9c8e972b203ab8547708947f8d6e8277375f8bf9ee4ea1eab82e82e68895bec0a4ef6e1e2f6f62e4ab5756f8f49716579c3c9d581e5e62bec6cf809fa3a020de57a59c6b6c89ed23418defbe9d8afb4b3b8fbe947cf98bbdbb1fff8e5728c824055bcf352cc200ae548975a4d11a1e54a13141dd330ad9779ec82914d44e8055e1191a249c66cf86af6fb98eaafe16224d6803152b581d100e03a7e726f2e129044f9c45acd1ab35bd08b5098d750ee3a01b85963848a140a893fa3687ab04f75b07cc745440e92fe96cb4795e69f9c8c2c3052bfbd12b5903604d429a062fdaf39fc3036e20fc3f21ec91a0a03501c96af1a5793308ec0021d740cde668ff63386a158e44ba3148d574168283a1faefd5abca76a6e0e915d4e20075f33a95b1a183af6227ad4c614d1dfa0ff4b3a77d2f83110e8e609b92f89a54eef4cdb1d92872c7ef660bc92e763213ab047a8945bcd4854b788d6d15d04b68e9addcbdf4d147f180b1e73f94cc8f4e01df9c0751af1b11e410c62e857e91b1f097606ecb1daab5c540bb231e584679c5e4cc1a7e81de0ed35bcd2e058d93fa2e8fa276aff25fae130a041c8352a751a3955044dc76e48404a098d8971bcec2d700300de7b7f7f31f649250109e8af6881d1a6f43565766c24dbde887d109b51d78094effe1610906cb9928f8ad6b275239020ebd36c0bda7ab9a380a948850bd378ea5ab19058dc1b46515dea751927e70d63be855f9ca7be53fa4fe172e0ee70efbae9bd47c45d3b53343b855f851dc511af613998f87d5c670d7a5b64dccf8f161660f595a4b9916c5dc323b385253d6bd86baf6d21725a4ca28d935ae651bd8c71825d453ffa58631e1e41d65caf6572f53f4545d41dfcf52d1f8c34e76d7979d5cab401d3a405373abdaddd589a588aeb70b08bb02d424a279eaeed8e51c6505ab71241e4a7a5d49f170927c5198b98bedb13fb1f42b0d96c2d8a25235a9cb5d7549374519b0c7a0472c20907393f21e84af18f9d4262a3e0aefd8c79ecbd79e6f505d717b02291d4497f78a985f1b8f2c9c68e576355fe9a937fc54524e451a2b120cd3066a7956cff6124a92de33467246c69e9bc60a55a5bd71a1871a2974ce96ef216d1ebbce6f8e6bcba76d5007c3715fd9a841a5e18d4619a23aebe281f5eab35d92f5f5c3b0f99147ed6d2df32ad100fed37fa203c5fd0a7c0639bcd521be240c615bdfd612fd4e4c31e9bcd2b7eed09fcaa6856f46b6c61edbbe30ede0f57804bf688d1bb31f15be5e6a8a3f1b8c2f522cc9a1ef05a47431c37e733a87e07dcfaa68dfeed1f01c0184ea96ee4b6846a969c308ca5ec1bbfb65fe757780bff93032a5124d2b8e67f1531545d3af246549292a77f626c5bed1810bf460eaa259cebf14e24e5c6335528c8298f21cf12f6c45d7cf5722d12bf2b92801923e1ffb17f881397b6cfcde4df8e89f89f6a2f790d7a60351edebc5d421920e402d293dbabd00585a664447682aa53498b824ed56e4bbdca356409721e820769f07a5d269e074dacdd93bb241f573eef03e2caa71053d902ecd4481e20524fcd39e43d68ec087e4b7e16c4f9cfa7710f7be76b8ef87469b84d52a2b5c333fe46b6e8b6a167380d9c9279cae17fb2cd927017a8400d986d965c06a6ce2b650cbf14e75e67aeb428e7e2141ddc7859a3cf9f47eb394f44f3208c8069f821c5db1af141fbb454feff4e9af7c2685f1bd2ec86bd41c3a1001f8e445eeddddc8ebb3a17fef42a08a7d9d23d0039b48770ab9ac6cf25d5ba2e3b75b384a3b1a6ef287446440107ae7a320c0c7b54e7c8b73b3ef447ed0f0430517fc530f4e14f7c44614d32ee711419f474a7e0e7b386813b193ef462211e1e83f63493f0be6330143a4e9169669580dd8203b4dcb308004afa33b708b489e3f5d8405d68f048f3a8e1a034bffb0dc7e936024df8e13c1396a6e1965e27254cbdd8a75530ed7b624ebde8eae98250e42150b1240f5d3c98347a8dcce65125818616710403fe902deaece11b4d716f6cf498a5e52b15950e443f6c24f73b9f98e46537c2cbee301416f5eb8198a14f0d42545051653d06bd930689de5be85ebd55f3ba0759a014422ab0fbde4d8dca39d1cab035bac3c47532ace2dae416e692c6da3c845355fc7ea44418ce9c208c382d2884c554cc00504e1d2acaae9793def6e7e8282b1b37b00ea33ae3dae02955652428bbb00a2293c97f5393878113bb8956d103de0fd435c749b354814e226c3369bc67e919869ccf35f951982db412865fbf2664084588296eec3378783c9d7baca81e42488ec2fc384bcfbdcd657dfd0814be9b4b0a5d0799898571f9f73ad2543cebdbb387cebbca4037b047ce1eae66b4ba962def340234f4eae37458732e63ba2c282345df1cfedfabc26dc5486fd17cedf35b77e4cb8e23998dd3441de4527c0cbc8b85a11392ed57008125a8c58fa6f3173860f50449ef408fb3205c59e86d74e8d962e1d49ac8941e5b2627d03dd16703d638c1344794314292db1f7aa8ee5a50dbaf903e439bf3f7eb657f68a9a8febd7681db7b4f5f268ef396931d91dfba808a371aac95607cb78bf048e3a98306898c98edcde17e57bd9028fd9dc6671ab855707fd08e08e92a3b6c5dd1f6ee60299ff8af111589fa693697e61e92cb140e3cbf70b72da6c9427cb89e1d40ed9cff81b4c324496b3a40c1d769e294e8fc7221cc4566369deba680188b2116f82daa4ef39bf8fa6ba99e55d8aba0b21b917dae2e2a3e45ebfd9f7d585e4b7eb1132c6116eeb0bd338fa6d025be8e722f65df2f6f0e9bbd2471b0b32ff1e69bb7bcea37fdc46f0c7dc6e9616556f976a3b65043d0a56f8206c5a1b534a672caec717379074ddeb5b606158db82ac076130c7c98d47d00906c8b7cd23bbf74b27baa3880efc69629c524a536f8b7d3b90b1e2bb43414d1f51dab1eedb0ec86c799395aa4cc51cb9863ae0a71c5d203a3ef3dda5e01cb9aa0cc527ea422efc7da4aba60b4c424c3e95ca509a673898656cc432c29f046cc4bd02891fd058ece06baf62f45ecce13e20181b96bd21dc235fc9da722258e3287dcf2bb547d60b0b3a8b6fc4667939f298b2f29d8fc4be4ed7ed13720dbb2d1e25bf3c742685efb6fd88f99b32657991a795475dc1ad3fae38cf35bab3413270c7ce14d1c4e12b69320cab0d98c66981532967bb7fe02561387936061f6b99eaf343e0ea78013bdbe3149d43f87e2da647cea3a0a28630a2cf70494c948143cae618873eac627fc3d640657e48daffb2439fa6ec0f01011f0bf3835ce2203597370d5a5caefbe478aac12468cb9385ec145ad6e3f4a0ac4f44c7202bd96a0fc843c82093099a60fe50ae314031f46032ee20ef549b3ad98b6349b96004502685fdd44907f25dc332f5579b9ae056b862b726f2c38901320adb14b8066509953746eb91da9b4b5b7454c862a300fe36fa0df9a82e4521b2717ce511c7cc63821a802b55a9636ce42d34da8713fdfecd86becb52a6f3886e1c673d6bc5933ed753fe3bbc12e6a2814d8808c85106e585c8236bda3147630b7af9f92ec8d2ef2ad35f0e92684331f194e4121d2540dffb3fa58d283e75320c5d95faee80269c628b6520c57925873e1cb401375bbb808c1702e18689999449a2ba33335c6f3195d1f95fabd9eb2d6bbd9ada9603382911fd74a5a471b21e934eb40fc66173228ca5586f752a2e5bcd5b175cffb1a0b7566a29a421fc15b6a1c12e1778bf8801fd67faa5ee12109385014506d2c75d6db3c3d74728b893709853e3d713dfdc2d760a3c6814cdd1526eab9d71bf05cb82c21c722792ad37bb859a68326d42c0b9a943c034e3ea5d419e571c23f05e0a18a117e4d1c6bde2fbd250f1679d271769c28a8848eb23ffdf69d9ccca32ca91757cf86c1ad27933c3c6e016637beaa9ea0e02974f212208526e450669be95410be1c28552ab212d0280c982f7852ae16efe21ffe1014ec364e809e58f9621e69f2d0a21ad7d8626653576ece9bbea9cedf054e517b24b6ac4fe7cae6541cc23d9b2e9fb611b2ab9118fa336d1e1b56ed213044054901c72eefa76635153bfe0a0c8d374fc0f18b15ffe9ccb61a89432e4813c83b0e2ce5e957978029496c09988b44107a191fd1412b391f4c963b4e89205ebd132a4d6b477e943140840df72611a8a64134c086e7ea2b273be9d986fda4b05e493bb9c4897bad54999739f3721ec9863b0897e2536cc02a0d583f5af319e9feb2ed9b81aa52ec7a88c027d7dcfcb7ab07b0b752531e944ed84d098d326adc3e4fdf46dc58f371ba979077ce8e0e51bfb3f7d6643bac3eb2b17308bf8c32562eddbfc0e8e122fb5a30a0a8229aef4bced5288f5d73281504751542a5fbef32c46ddbf6429a7b2be7fb43bc2d021b614bfbf48f9ae753ff775dd2d13bb4dac12f78dca5f5caba573b553f721956a11b8916993064f7e4b8f7152d27a5b432c2ef33976359fef7bb29d02bd6414bffb831e093a7c62a83733ab36f105f22f5aada0b27a7d2b7fcf4e6c8acc9bddf990799175a456f548c69d53db6ab401ff0773f9da3e7b643bd9b90e726f3e4fc54574aa068fd052e959e9edc158fba13589e73d52c29912ab371209729de16362f476e614e76c") r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r8, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000001c0)='\x00', 0x7, 0x6, &(0x7f0000000680)=[{&(0x7f0000000240)="5c5d0b01b4c38546ca24a0b4ab4def5180b4c4acecc7d6e3f4f6840cf85d3a40d1c0c2d3e3c4cc8c5c6f9bcd4f9e7913eed1", 0x32, 0x4c}, {&(0x7f0000000340)="dcff563138c8d34e0159eb69b2a16643ff54357c161aaaae9aa5d7b055a0c33d5763f4dfd443a0c0843729e2a8a84a77df4f2720a9f67bf8e6723bb6f733218416df89b869b461e79410f34fae698e47691f7906e8b9ffafed769af792ab0c76dab8846380af7fc484a1c25473981fdb82669c7f2b46dd63a62b10f8846ecbd3280baf91ed749388c026c89cbe6e0c8232d6f484c207d280dcf1a053ef01aabb06a218b0", 0xa4, 0x101}, {&(0x7f0000000400)="b9e068270c9cc3ad9b9b654ce08aa91105f0a4c2145af3f810c0068b025fc135a37e2feef73da269a82dc7ecf316a559d7fbc8c5f3fc3c064775ee16f50a17bfd68897a16f3ae3e09fde69724a66283a0668a88a23ce39842c04f8ea2c87d8ed4b7d22dc958be8656202ebf96cf0e17c03183cf7b4ec7ab71ddcc850182a74f08d0ffeb16313c02107cb7ce5e015cc32bb4cc18001b0233b56b25dc519232db9e98b1d763d9aee3a2878437aedd3f5438ae2cdd92f3186440963d30af7b2f17d4b3d7a0db63433c420205fdac23cde5e0dffc87f45552ee5b03c0e27e364", 0xde, 0xa1f}, {&(0x7f0000000500)="22038e56c67e78e15aa04b9015cdb99bf3e480c4bfb49973c117f1e6262552086da43a955cc03ca550fa51e9995066c6250f67ff1c3ffb561a6da773d552f02e2b4409c6fffa50d7980e76ff877b3ceb433b01549cb603fc0ff657cb1e6b928f192cf485cc68d38b8ca2c57bc1d786f98b994866e3aff6f9504a1f020b0bd0ec6a55bd9cb7fdafed288cb4ec6807bd45c36e049fbdf237aca1a4cde745", 0x9d, 0xfffffffffffffff7}, {&(0x7f00000005c0)="ee0d69e7121cf70e9d5492e1ca9f60a9aca129a1561a111e", 0x18, 0x63b}, {&(0x7f0000000600)="16b68e681dcc6fd3b60d76799c65568596a9cee2220eab47a0eeb8fe79e2a70792418895de0195097765e0a49604a4e586a985de18a765fe2561a82380629a5b29b56e381c9f3dcf3aff0a989e49162ce26fa20a6b0a1cb5739a", 0x5a, 0x100}], 0x20, &(0x7f0000000740)={[{@undelete}, {@anchor={'anchor', 0x3d, 0x7fff}}, {@shortad}, {@bs={'bs', 0x3d, 0xff}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@utf8}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x17}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}) (async) syz_io_uring_submit(0x0, r6, &(0x7f0000000840)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000800)='./file0\x00', 0x94, 0x44000, 0x23456}, 0x2) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) clone(0x4000000, &(0x7f0000000040)="5b7129da75455c3bb36f9061569284a311dd0def8aec5e785b8517fd2b16dc2da83ac41057d19c860a6369df1bfd0ef35740e8db", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000001340)="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") (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r8, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) [ 468.056298][T16253] input: syz0 as /devices/virtual/input/input1910 [ 468.098954][T16252] input: syz0 as /devices/virtual/input/input1911 18:55:52 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r5 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) r6 = syz_io_uring_setup(0x10a5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x191}, &(0x7f00000c1000/0x3000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r10 = socket$inet6(0xa, 0x806, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x10001}}, './file0\x00'}) connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) syz_io_uring_submit(r8, r9, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r10, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r9, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r13, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x10a5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x191}, &(0x7f00000c1000/0x3000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r3, r7, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x10001}}, './file0\x00'}) (async) connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) (async) syz_io_uring_submit(r8, r9, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r10, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r3, r9, &(0x7f0000000040), 0x4) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r12, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r13, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:55:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 468.176113][T16254] loop4: detected capacity change from 0 to 16383 [ 468.199463][T16260] loop0: detected capacity change from 0 to 16383 18:55:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 468.374144][T16265] input: syz0 as /devices/virtual/input/input1912 [ 468.541987][T16278] input: syz0 as /devices/virtual/input/input1913 18:55:52 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r5 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) r6 = syz_io_uring_setup(0x10a5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x191}, &(0x7f00000c1000/0x3000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r10 = socket$inet6(0xa, 0x806, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x10001}}, './file0\x00'}) connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) syz_io_uring_submit(r8, r9, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r10, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r9, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r13, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x10a5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x191}, &(0x7f00000c1000/0x3000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r3, r7, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x10001}}, './file0\x00'}) (async) connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) (async) syz_io_uring_submit(r8, r9, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r10, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r3, r9, &(0x7f0000000040), 0x4) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r12, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r13, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:55:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 468.749765][T16287] loop0: detected capacity change from 0 to 16383 [ 468.765162][T16292] input: syz0 as /devices/virtual/input/input1914 [ 468.881018][T16302] input: syz0 as /devices/virtual/input/input1915 18:55:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:52 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x2, 0x5, {0x0, r0}, 0xfffffffe, 0x1, 0x1, {0x0, 0x0, r5}}, 0x1) 18:55:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 469.097335][T16312] input: syz0 as /devices/virtual/input/input1916 [ 469.158529][T16316] input: syz0 as /devices/virtual/input/input1917 18:55:53 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:53 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:53 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x2, 0x5, {0x0, r0}, 0xfffffffe, 0x1, 0x1, {0x0, 0x0, r5}}, 0x1) 18:55:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 469.938863][T16328] input: syz0 as /devices/virtual/input/input1918 [ 469.970713][T16329] input: syz0 as /devices/virtual/input/input1919 18:55:53 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x2, 0x5, {0x0, r0}, 0xfffffffe, 0x1, 0x1, {0x0, 0x0, r5}}, 0x1) 18:55:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:54 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 470.221615][T16342] input: syz0 as /devices/virtual/input/input1920 [ 470.245196][T16346] input: syz0 as /devices/virtual/input/input1921 18:55:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:54 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:55:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:54 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x6352, &(0x7f00000000c0)={0x0, 0xc947, 0x10, 0x1, 0x3b8, 0x0, r0}, &(0x7f000042b000/0x2000)=nil, &(0x7f000042d000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r5 = mmap$IORING_OFF_SQES(&(0x7f000042f000/0x400000)=nil, 0x400000, 0x5, 0x10, r0, 0x10000000) r6 = fcntl$dupfd(r0, 0x406, r0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r6, 0x80, &(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x85, 0x3}}, 0xfd4e) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r8 = syz_mount_image$gfs2meta(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8, 0x2, &(0x7f0000000500)=[{&(0x7f00000003c0), 0x0, 0x1}, {&(0x7f0000000400)="e580f747287776d804cfc0664590ecd76358c982c1c38a0fb08a7629cb312132c29364b1298a9569595319d25be90e876011346befb2a37560184f150b192d0c2c415e1134c219d74a3713ac00923fbf7e15f9c50dd1e5a6281c7bf7b183d7f427f758cd8d3f8e892052ed77d79e7fc81385915de64833c097f3838d92b9d207abadbf8c573de28f3d2a9e099a078baaa14f8919c14a2f13ef8dd9e7bc620932ab1a816847f4f79af13d23779114bdc3ce6c80fc1d31e79df96ac008c1ed18679cbdc04e4acae7", 0xc7, 0x10000}], 0x800040, &(0x7f0000000540)={[{'!%'}], [{@permit_directio}, {@audit}, {@appraise_type}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x3, 0x0, r8, &(0x7f00000005c0), &(0x7f00000003c0)='./file0/file0\x00', 0x10, 0x6000, 0x0, {0x0, r7}}, 0x8) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:54 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 470.530344][T16359] input: syz0 as /devices/virtual/input/input1922 [ 470.620869][T16365] input: syz0 as /devices/virtual/input/input1923 18:55:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 470.714955][T16366] loop1: detected capacity change from 0 to 256 [ 470.742334][T16366] ======================================================= [ 470.742334][T16366] WARNING: The mand mount option has been deprecated and [ 470.742334][T16366] and is ignored by this kernel. Remove the mand 18:55:54 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 470.742334][T16366] option from the mount to silence this warning. [ 470.742334][T16366] ======================================================= [ 470.807296][T16378] input: syz0 as /devices/virtual/input/input1924 18:55:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 470.882187][T16380] input: syz0 as /devices/virtual/input/input1925 18:55:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:54 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 471.019238][T16383] input: syz0 as /devices/virtual/input/input1926 [ 471.124604][T16366] gfs2meta: Unknown parameter '!%' [ 471.203314][T16388] input: syz0 as /devices/virtual/input/input1927 18:55:55 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 18:55:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:55 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x6352, &(0x7f00000000c0)={0x0, 0xc947, 0x10, 0x1, 0x3b8, 0x0, r0}, &(0x7f000042b000/0x2000)=nil, &(0x7f000042d000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f000042f000/0x400000)=nil, 0x400000, 0x5, 0x10, r0, 0x10000000) r6 = fcntl$dupfd(r0, 0x406, r0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r6, 0x80, &(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x85, 0x3}}, 0xfd4e) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r8 = syz_mount_image$gfs2meta(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8, 0x2, &(0x7f0000000500)=[{&(0x7f00000003c0), 0x0, 0x1}, {&(0x7f0000000400)="e580f747287776d804cfc0664590ecd76358c982c1c38a0fb08a7629cb312132c29364b1298a9569595319d25be90e876011346befb2a37560184f150b192d0c2c415e1134c219d74a3713ac00923fbf7e15f9c50dd1e5a6281c7bf7b183d7f427f758cd8d3f8e892052ed77d79e7fc81385915de64833c097f3838d92b9d207abadbf8c573de28f3d2a9e099a078baaa14f8919c14a2f13ef8dd9e7bc620932ab1a816847f4f79af13d23779114bdc3ce6c80fc1d31e79df96ac008c1ed18679cbdc04e4acae7", 0xc7, 0x10000}], 0x800040, &(0x7f0000000540)={[{'!%'}], [{@permit_directio}, {@audit}, {@appraise_type}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x3, 0x0, r8, &(0x7f00000005c0), &(0x7f00000003c0)='./file0/file0\x00', 0x10, 0x6000, 0x0, {0x0, r7}}, 0x8) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 471.399486][T16396] input: syz0 as /devices/virtual/input/input1928 18:55:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 471.472397][T16399] input: syz0 as /devices/virtual/input/input1929 18:55:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 471.550557][T16405] loop1: detected capacity change from 0 to 256 [ 471.579130][T16405] gfs2meta: Unknown parameter '!%' [ 471.584804][T16409] input: syz0 as /devices/virtual/input/input1930 [ 471.627053][T16411] input: syz0 as /devices/virtual/input/input1931 18:55:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 471.790014][T16416] input: syz0 as /devices/virtual/input/input1932 18:55:55 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x6352, &(0x7f00000000c0)={0x0, 0xc947, 0x10, 0x1, 0x3b8, 0x0, r0}, &(0x7f000042b000/0x2000)=nil, &(0x7f000042d000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r5 = mmap$IORING_OFF_SQES(&(0x7f000042f000/0x400000)=nil, 0x400000, 0x5, 0x10, r0, 0x10000000) r6 = fcntl$dupfd(r0, 0x406, r0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r6, 0x80, &(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x85, 0x3}}, 0xfd4e) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r8 = syz_mount_image$gfs2meta(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8, 0x2, &(0x7f0000000500)=[{&(0x7f00000003c0), 0x0, 0x1}, {&(0x7f0000000400)="e580f747287776d804cfc0664590ecd76358c982c1c38a0fb08a7629cb312132c29364b1298a9569595319d25be90e876011346befb2a37560184f150b192d0c2c415e1134c219d74a3713ac00923fbf7e15f9c50dd1e5a6281c7bf7b183d7f427f758cd8d3f8e892052ed77d79e7fc81385915de64833c097f3838d92b9d207abadbf8c573de28f3d2a9e099a078baaa14f8919c14a2f13ef8dd9e7bc620932ab1a816847f4f79af13d23779114bdc3ce6c80fc1d31e79df96ac008c1ed18679cbdc04e4acae7", 0xc7, 0x10000}], 0x800040, &(0x7f0000000540)={[{'!%'}], [{@permit_directio}, {@audit}, {@appraise_type}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x3, 0x0, r8, &(0x7f00000005c0), &(0x7f00000003c0)='./file0/file0\x00', 0x10, 0x6000, 0x0, {0x0, r7}}, 0x8) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_setup(0x6352, &(0x7f00000000c0)={0x0, 0xc947, 0x10, 0x1, 0x3b8, 0x0, r0}, &(0x7f000042b000/0x2000)=nil, &(0x7f000042d000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000180)) (async) mmap$IORING_OFF_SQES(&(0x7f000042f000/0x400000)=nil, 0x400000, 0x5, 0x10, r0, 0x10000000) (async) fcntl$dupfd(r0, 0x406, r0) (async) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r6, 0x80, &(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x85, 0x3}}, 0xfd4e) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_mount_image$gfs2meta(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8, 0x2, &(0x7f0000000500)=[{&(0x7f00000003c0), 0x0, 0x1}, {&(0x7f0000000400)="e580f747287776d804cfc0664590ecd76358c982c1c38a0fb08a7629cb312132c29364b1298a9569595319d25be90e876011346befb2a37560184f150b192d0c2c415e1134c219d74a3713ac00923fbf7e15f9c50dd1e5a6281c7bf7b183d7f427f758cd8d3f8e892052ed77d79e7fc81385915de64833c097f3838d92b9d207abadbf8c573de28f3d2a9e099a078baaa14f8919c14a2f13ef8dd9e7bc620932ab1a816847f4f79af13d23779114bdc3ce6c80fc1d31e79df96ac008c1ed18679cbdc04e4acae7", 0xc7, 0x10000}], 0x800040, &(0x7f0000000540)={[{'!%'}], [{@permit_directio}, {@audit}, {@appraise_type}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x3, 0x0, r8, &(0x7f00000005c0), &(0x7f00000003c0)='./file0/file0\x00', 0x10, 0x6000, 0x0, {0x0, r7}}, 0x8) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:55:55 executing program 4: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x6352, &(0x7f00000000c0)={0x0, 0xc947, 0x10, 0x1, 0x3b8, 0x0, r0}, &(0x7f000042b000/0x2000)=nil, &(0x7f000042d000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r5 = mmap$IORING_OFF_SQES(&(0x7f000042f000/0x400000)=nil, 0x400000, 0x5, 0x10, r0, 0x10000000) r6 = fcntl$dupfd(r0, 0x406, r0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r6, 0x80, &(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x85, 0x3}}, 0xfd4e) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r8 = syz_mount_image$gfs2meta(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8, 0x2, &(0x7f0000000500)=[{&(0x7f00000003c0), 0x0, 0x1}, {&(0x7f0000000400)="e580f747287776d804cfc0664590ecd76358c982c1c38a0fb08a7629cb312132c29364b1298a9569595319d25be90e876011346befb2a37560184f150b192d0c2c415e1134c219d74a3713ac00923fbf7e15f9c50dd1e5a6281c7bf7b183d7f427f758cd8d3f8e892052ed77d79e7fc81385915de64833c097f3838d92b9d207abadbf8c573de28f3d2a9e099a078baaa14f8919c14a2f13ef8dd9e7bc620932ab1a816847f4f79af13d23779114bdc3ce6c80fc1d31e79df96ac008c1ed18679cbdc04e4acae7", 0xc7, 0x10000}], 0x800040, &(0x7f0000000540)={[{'!%'}], [{@permit_directio}, {@audit}, {@appraise_type}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x3, 0x0, r8, &(0x7f00000005c0), &(0x7f00000003c0)='./file0/file0\x00', 0x10, 0x6000, 0x0, {0x0, r7}}, 0x8) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 471.900351][T16420] input: syz0 as /devices/virtual/input/input1933 18:55:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:56 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r6 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r6, 0x0, 0x0, 0x0, 0x48884, 0x1}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x383ed20c25847a80) ioctl$VIDIOC_SUBDEV_S_CROP(r8, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x2, 0x8001, {0x0, r8}, 0xd3, 0x4, 0x1, {0x0, 0x0, r3}}, 0xfff) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r9, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:56 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:56 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x5048, &(0x7f0000000440)={0x0, 0xc07a, 0x10, 0x0, 0x202, 0x0, r0}, &(0x7f000042b000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f0000000600)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x400) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2, 0x80, 0x8, 0x3, 0x0, 0x5, 0x920c0, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4901, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x2581, 0x1, 0x9, 0x3, 0x2, 0x2, 0x0, 0x0, 0xd2ae, 0x0, 0x80}, 0x0, 0x3, r5, 0x1) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r6, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x12, r0, 0x8000000) pread64(r4, &(0x7f0000000340)=""/211, 0xd3, 0x7) r9 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r11 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xc, 0x4, {0x0, r0}, 0x1c, 0x3, 0x0, {0x0, r10, r11}}, 0x2b) [ 472.319172][T16431] input: syz0 as /devices/virtual/input/input1934 [ 472.359136][T16434] input: syz0 as /devices/virtual/input/input1936 18:55:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 472.370941][T16433] input: syz0 as /devices/virtual/input/input1935 18:55:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:56 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x5048, &(0x7f0000000440)={0x0, 0xc07a, 0x10, 0x0, 0x202, 0x0, r0}, &(0x7f000042b000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f0000000600)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x400) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2, 0x80, 0x8, 0x3, 0x0, 0x5, 0x920c0, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4901, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x2581, 0x1, 0x9, 0x3, 0x2, 0x2, 0x0, 0x0, 0xd2ae, 0x0, 0x80}, 0x0, 0x3, r5, 0x1) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r6, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x12, r0, 0x8000000) (async) pread64(r4, &(0x7f0000000340)=""/211, 0xd3, 0x7) (async) r9 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r11 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xc, 0x4, {0x0, r0}, 0x1c, 0x3, 0x0, {0x0, r10, r11}}, 0x2b) [ 472.496784][T16442] input: syz0 as /devices/virtual/input/input1937 18:55:56 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x40006}, 0x8) sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x1c8, 0x0, 0x0, 0x148, 0x320, 0x0, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @loopback, 0x0, 0x0, 'wg0\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'veth1_virt_wifi\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0, 0x0) close(r0) 18:55:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:56 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r6 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r6, 0x0, 0x0, 0x0, 0x48884, 0x1}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x383ed20c25847a80) ioctl$VIDIOC_SUBDEV_S_CROP(r8, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x2, 0x8001, {0x0, r8}, 0xd3, 0x4, 0x1, {0x0, 0x0, r3}}, 0xfff) (async) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r9, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 472.621597][T16444] input: syz0 as /devices/virtual/input/input1938 [ 472.787642][T16454] input: syz0 as /devices/virtual/input/input1939 18:55:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:57 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x40006}, 0x8) sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x1c8, 0x0, 0x0, 0x148, 0x320, 0x0, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @loopback, 0x0, 0x0, 'wg0\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'veth1_virt_wifi\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0, 0x0) close(r0) 18:55:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:57 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x5048, &(0x7f0000000440)={0x0, 0xc07a, 0x10, 0x0, 0x202, 0x0, r0}, &(0x7f000042b000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f0000000600)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x400) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2, 0x80, 0x8, 0x3, 0x0, 0x5, 0x920c0, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4901, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x2581, 0x1, 0x9, 0x3, 0x2, 0x2, 0x0, 0x0, 0xd2ae, 0x0, 0x80}, 0x0, 0x3, r5, 0x1) (async) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r6, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x12, r0, 0x8000000) pread64(r4, &(0x7f0000000340)=""/211, 0xd3, 0x7) (async) r9 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r11 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xc, 0x4, {0x0, r0}, 0x1c, 0x3, 0x0, {0x0, r10, r11}}, 0x2b) 18:55:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:57 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (async, rerun: 32) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) r6 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r6, 0x0, 0x0, 0x0, 0x48884, 0x1}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x383ed20c25847a80) ioctl$VIDIOC_SUBDEV_S_CROP(r8, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x2, 0x8001, {0x0, r8}, 0xd3, 0x4, 0x1, {0x0, 0x0, r3}}, 0xfff) (async) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r9, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 473.309113][T16464] input: syz0 as /devices/virtual/input/input1940 [ 473.318809][T16465] input: syz0 as /devices/virtual/input/input1941 18:55:57 executing program 4: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r5 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x15ad, &(0x7f0000000080)={0x0, 0xfa2b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r9 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r10, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) r11 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r11, 0xc040563e, &(0x7f00000001c0)={0x1, 0x0, {0x1}}) syz_io_uring_submit(r3, r8, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r10, 0xa6, {0x0, r11}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x3ff) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r13, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:55:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 473.550962][T16484] input: syz0 as /devices/virtual/input/input1942 [ 473.578016][T16486] input: syz0 as /devices/virtual/input/input1943 18:55:57 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xfb63}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) dup(r3) 18:55:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 473.818900][T16495] input: syz0 as /devices/virtual/input/input1944 [ 473.844538][T16497] input: syz0 as /devices/virtual/input/input1945 18:55:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:57 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xfb63}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) dup(r3) 18:55:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:57 executing program 0: r0 = syz_io_uring_setup(0x1a7, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xd5, 0x1f, 0x2, 0x6, 0x0, 0xc900000000000000, 0x2000, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x424a, 0x5, 0xf2, 0x9, 0x3, 0x9, 0x401, 0x0, 0x8080, 0x0, 0x80000001}, 0x0, 0x3, r5, 0x1) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x9, 0x1, 0x0, 0x2, 0x0, 0x506, 0x3170, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x9, 0x9}, 0x20, 0x2, 0x3, 0x0, 0x36d6, 0x6, 0x8, 0x0, 0x40, 0x0, 0x1}, 0x0, 0x0, r3, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x25af43fe, 0x4, 0x0, {0x0, 0x0, r7}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x1010, r0, 0x0) r9 = syz_io_uring_setup(0x42ac, &(0x7f00000000c0)={0x0, 0x7be4, 0x1, 0x1, 0x349, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r9, {0x100000000}}, './file0\x00'}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r11, 0x7a5, &(0x7f0000000480)={{@hyper, 0x2}, 0x0, 0x1}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r10, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r12}}, 0x5) [ 473.996007][T16499] input: syz0 as /devices/virtual/input/input1946 [ 474.023770][T16502] input: syz0 as /devices/virtual/input/input1947 [ 474.082682][T16509] input: syz0 as /devices/virtual/input/input1948 18:55:58 executing program 4: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) sendfile(r4, r0, &(0x7f00000000c0)=0x10001, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x1, {0x0, r6}}, 0xfffff000) 18:55:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 474.313350][T16516] input: syz0 as /devices/virtual/input/input1949 18:55:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:58 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xfb63}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) dup(r3) (rerun: 32) 18:55:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:58 executing program 0: r0 = syz_io_uring_setup(0x1a7, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xd5, 0x1f, 0x2, 0x6, 0x0, 0xc900000000000000, 0x2000, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x424a, 0x5, 0xf2, 0x9, 0x3, 0x9, 0x401, 0x0, 0x8080, 0x0, 0x80000001}, 0x0, 0x3, r5, 0x1) (async) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) (async) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x9, 0x1, 0x0, 0x2, 0x0, 0x506, 0x3170, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x9, 0x9}, 0x20, 0x2, 0x3, 0x0, 0x36d6, 0x6, 0x8, 0x0, 0x40, 0x0, 0x1}, 0x0, 0x0, r3, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x25af43fe, 0x4, 0x0, {0x0, 0x0, r7}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x1010, r0, 0x0) (async) r9 = syz_io_uring_setup(0x42ac, &(0x7f00000000c0)={0x0, 0x7be4, 0x1, 0x1, 0x349, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r9, {0x100000000}}, './file0\x00'}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r11, 0x7a5, &(0x7f0000000480)={{@hyper, 0x2}, 0x0, 0x1}) (async) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r10, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r12}}, 0x5) 18:55:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:58 executing program 4: r0 = syz_io_uring_setup(0x1a7, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xd5, 0x1f, 0x2, 0x6, 0x0, 0xc900000000000000, 0x2000, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x424a, 0x5, 0xf2, 0x9, 0x3, 0x9, 0x401, 0x0, 0x8080, 0x0, 0x80000001}, 0x0, 0x3, r5, 0x1) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x9, 0x1, 0x0, 0x2, 0x0, 0x506, 0x3170, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x9, 0x9}, 0x20, 0x2, 0x3, 0x0, 0x36d6, 0x6, 0x8, 0x0, 0x40, 0x0, 0x1}, 0x0, 0x0, r3, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x25af43fe, 0x4, 0x0, {0x0, 0x0, r7}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x1010, r0, 0x0) r9 = syz_io_uring_setup(0x42ac, &(0x7f00000000c0)={0x0, 0x7be4, 0x1, 0x1, 0x349, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r9, {0x100000000}}, './file0\x00'}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r11, 0x7a5, &(0x7f0000000480)={{@hyper, 0x2}, 0x0, 0x1}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r10, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r12}}, 0x5) [ 474.494644][T16522] input: syz0 as /devices/virtual/input/input1950 [ 474.507475][T16531] input: syz0 as /devices/virtual/input/input1951 18:55:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:58 executing program 0: r0 = syz_io_uring_setup(0x1a7, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xd5, 0x1f, 0x2, 0x6, 0x0, 0xc900000000000000, 0x2000, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x424a, 0x5, 0xf2, 0x9, 0x3, 0x9, 0x401, 0x0, 0x8080, 0x0, 0x80000001}, 0x0, 0x3, r5, 0x1) (async) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) (async) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x9, 0x1, 0x0, 0x2, 0x0, 0x506, 0x3170, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x9, 0x9}, 0x20, 0x2, 0x3, 0x0, 0x36d6, 0x6, 0x8, 0x0, 0x40, 0x0, 0x1}, 0x0, 0x0, r3, 0x0) (async) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x25af43fe, 0x4, 0x0, {0x0, 0x0, r7}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x1010, r0, 0x0) (async) r9 = syz_io_uring_setup(0x42ac, &(0x7f00000000c0)={0x0, 0x7be4, 0x1, 0x1, 0x349, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r9, {0x100000000}}, './file0\x00'}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r11, 0x7a5, &(0x7f0000000480)={{@hyper, 0x2}, 0x0, 0x1}) (async) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r10, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r12}}, 0x5) 18:55:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:58 executing program 4: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r2, 0x688c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x788a, 0xc2c0, 0x1, &(0x7f00000000c0)={[0x5]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) fsync(r3) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 474.751211][T16544] input: syz0 as /devices/virtual/input/input1952 [ 474.759751][T16546] input: syz0 as /devices/virtual/input/input1953 18:55:59 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000540)={0x0, 0x9effffff, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="110700000000000000000700000008000300", @ANYRES32=r10], 0x1c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@ipmr_newroute={0xc8, 0x18, 0x20, 0x70bd25, 0x4bba1cd5, {0x80, 0x14, 0x0, 0x6, 0xfe, 0x2, 0xff, 0x9, 0x500}, [@RTA_MARK={0x8, 0x10, 0x3}, @RTA_ENCAP={0x60, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x5c, 0x1, {0x1, 0x58, 0x1, 0x3, 0x8000, [@private0, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @dev={0xfe, 0x80, '\x00', 0x35}, @remote]}}}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x2, 0x94, r6}}, @RTA_MULTIPATH={0xc, 0x9, {0x8835, 0x4, 0x9d}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TTL={0x5, 0x4, 0x9}}, @RTA_PRIORITY={0x8, 0x6, 0x1ff}, @RTA_GATEWAY={0x8, 0x5, @broadcast}, @RTA_IIF={0x8, 0x3, r10}, @RTA_MARK={0x8, 0x10, 0x900000}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x24004010) 18:55:59 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)='\x00') r1 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r7 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x3, 0x7, {0x0, r4}, 0x1, 0x9, 0x0, {0x0, r8, r4}}, 0xfff) r9 = dup(0xffffffffffffffff) write$FUSE_BMAP(r9, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x1, 0x80, 0x17, 0x0, 0x0, 0x100, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x93c, 0x7}, 0x4000, 0x9, 0x8, 0x2, 0xd8b, 0x8, 0x5, 0x0, 0x7, 0x0, 0x6}, 0x0, 0x3, r9, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r1, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r10, r3, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r1, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r12, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000340)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r9, 0x0, &(0x7f0000000240)="18d741f7a047a37a6718015737335de89ca1551280dfd0d116ed32891e062e89907dc63ad795b28bef5e3f37055aa018562c2f852084e7474fe59714", 0x3c, 0x8000, 0x4da1bb690353b163}, 0x800) 18:55:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:55:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:59 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)='\x00') r1 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r7 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x3, 0x7, {0x0, r4}, 0x1, 0x9, 0x0, {0x0, r8, r4}}, 0xfff) r9 = dup(0xffffffffffffffff) write$FUSE_BMAP(r9, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x1, 0x80, 0x17, 0x0, 0x0, 0x100, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x93c, 0x7}, 0x4000, 0x9, 0x8, 0x2, 0xd8b, 0x8, 0x5, 0x0, 0x7, 0x0, 0x6}, 0x0, 0x3, r9, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r1, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r10, r3, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r1, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r12, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000340)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r9, 0x0, &(0x7f0000000240)="18d741f7a047a37a6718015737335de89ca1551280dfd0d116ed32891e062e89907dc63ad795b28bef5e3f37055aa018562c2f852084e7474fe59714", 0x3c, 0x8000, 0x4da1bb690353b163}, 0x800) [ 475.810912][T16564] input: syz0 as /devices/virtual/input/input1954 18:55:59 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000ac0)={0x401, 0x0, &(0x7f0000000a80)=[0xffffffffffffffff, r0, r3]}, 0x3) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r5, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) r7 = io_uring_setup(0x3b85, &(0x7f0000000a00)={0x0, 0x0, 0x4, 0x1, 0xffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x2, 0x200000ce, r8) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r10, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) r11 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x2, 0x9, &(0x7f0000000880)=[{&(0x7f0000000240)='t', 0x1, 0x8}, {&(0x7f0000000340)="a969c6fb06dae0bd740391f21a91d891d9a15a2e1449d2624801953a3a1cdb56bb5caad8f3a77e76e3469c40b75ef0b25874138465f86f11cd9a59f2ada68454f87cea44b83a7954251d3252da0d4e733ffe38dfe1b7713d520485f48e0a42f3c53c4d03d4b8249c2af43097d110b6c90934bbb93c7e8203e21427723d3f64dc73921bdb15dff177", 0x88, 0x3}, {&(0x7f0000000400)="ac1f3f8423557900eb88e01a0a7689e7f2fd15d7846b61a9fd", 0x19, 0x1ff}, {&(0x7f0000000440)="cc7e0a14b762f6a1c3d2604c1ddfd7ea3a06ce163cd35d4cd10678e75ecbcf4b031469b2412d76cab6dac03f7065a8a9cdf2d47b518343a97e6775e9e001b0d01d7e2b87", 0x44, 0x1ff}, {&(0x7f00000005c0)="3df4f01184ed9f469f0e142f2d1bed7151b55ed778d92c920f2d705fc4f6a355c887ecb62c4af97d1a6511ef400c42a64b899d55d2b63357710a4b81deafaca1b123d251304a6f4ddf3a19fb7ae738fd3ebe584e300b705fc04e4e6f95ecb7cc8b832c6f1345eacfd235b28c13d45171df8e55e2c90f74b348e52374ff9482af4ee2ee9923c2490479fda9b0eaad4ea045c198e9c6f5ec0aa8b120f2cb1a583956de", 0xa2, 0xe97}, {&(0x7f00000004c0), 0x0, 0x188e}, {&(0x7f0000000680)="6d25187dd89f5253e5a5756b13abbd3ea8cd0a0f7762ea898f609c9c3b11c8572937c4a19171281bb4f698f38ccb91b3caf2dd81a82b122143bb8713ad0e5a8a330342e13ee3505f4738690e526808580ad3bbd371a3874c7d3594be025d3d6037018f6c465879d4fbd59bccc5ee01c38384fdae50da4ee2d83b1ad58044ca06b250141e6af919d7abd8197499c5e28a657e683b59ca5a291dc3596ec258c15cac4f549b3053aed29186e8271f4a37e6501d3451df62b07d905d6425869d288fbc311b3747c74ef02dc79beaffbabdb6f32a2c", 0xd3, 0x6}, {&(0x7f0000000780)="a656011e88bbb816469802a29854d2f53e3e822d7e30665fcdce5344a627a6ad96dc8694b4270ae7e63d43f4a66661ce3f8dfe721383f709500cae6f71630aafaeaa27cce73bc0abb01f36ea9f29ed6bd32eb81727a749a1ebae2fa28739356115d7", 0x62, 0x9}, {&(0x7f0000000800)="bd9bb3a29b0836b89deb3179bb33318a19fc466a2a009f7c368c5c7cbfba01747fa5d1f0a52c541fcfc5d0747934944d6073bf40d89fca219fe12ea143f1fa4fb488101abf4881e4e8c855bf1b8af5fa9286e0e2fad95ca937f2c44c8ca21af51694909ffd6611b46af2aff807fcbb6483c94b411f2447e4c09ff8", 0x7b}], 0x401, &(0x7f0000000980)={[{@check_relaxed}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '+$:#\''}}, {@subj_user={'subj_user', 0x3d, '!/-!(#.,\x05]'}}]}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[r10, r4, r11], 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x633, 0xd, 0x3, {0x0, r8}}, 0x7) 18:55:59 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 64) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async, rerun: 64) rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (rerun: 64) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000540)={0x0, 0x9effffff, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="110700000000000000000700000008000300", @ANYRES32=r10], 0x1c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@ipmr_newroute={0xc8, 0x18, 0x20, 0x70bd25, 0x4bba1cd5, {0x80, 0x14, 0x0, 0x6, 0xfe, 0x2, 0xff, 0x9, 0x500}, [@RTA_MARK={0x8, 0x10, 0x3}, @RTA_ENCAP={0x60, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x5c, 0x1, {0x1, 0x58, 0x1, 0x3, 0x8000, [@private0, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @dev={0xfe, 0x80, '\x00', 0x35}, @remote]}}}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x2, 0x94, r6}}, @RTA_MULTIPATH={0xc, 0x9, {0x8835, 0x4, 0x9d}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TTL={0x5, 0x4, 0x9}}, @RTA_PRIORITY={0x8, 0x6, 0x1ff}, @RTA_GATEWAY={0x8, 0x5, @broadcast}, @RTA_IIF={0x8, 0x3, r10}, @RTA_MARK={0x8, 0x10, 0x900000}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x24004010) [ 475.862568][T16569] input: syz0 as /devices/virtual/input/input1955 18:55:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:55:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 476.108958][T16584] input: syz0 as /devices/virtual/input/input1956 [ 476.112483][T16582] loop1: detected capacity change from 0 to 24 [ 476.145395][T16585] input: syz0 as /devices/virtual/input/input1957 18:56:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 476.249776][T16582] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 18:56:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:00 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000ac0)={0x401, 0x0, &(0x7f0000000a80)=[0xffffffffffffffff, r0, r3]}, 0x3) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r5, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) r7 = io_uring_setup(0x3b85, &(0x7f0000000a00)={0x0, 0x0, 0x4, 0x1, 0xffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) r9 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x2, 0x200000ce, r8) (async) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r10, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) r11 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x2, 0x9, &(0x7f0000000880)=[{&(0x7f0000000240)='t', 0x1, 0x8}, {&(0x7f0000000340)="a969c6fb06dae0bd740391f21a91d891d9a15a2e1449d2624801953a3a1cdb56bb5caad8f3a77e76e3469c40b75ef0b25874138465f86f11cd9a59f2ada68454f87cea44b83a7954251d3252da0d4e733ffe38dfe1b7713d520485f48e0a42f3c53c4d03d4b8249c2af43097d110b6c90934bbb93c7e8203e21427723d3f64dc73921bdb15dff177", 0x88, 0x3}, {&(0x7f0000000400)="ac1f3f8423557900eb88e01a0a7689e7f2fd15d7846b61a9fd", 0x19, 0x1ff}, {&(0x7f0000000440)="cc7e0a14b762f6a1c3d2604c1ddfd7ea3a06ce163cd35d4cd10678e75ecbcf4b031469b2412d76cab6dac03f7065a8a9cdf2d47b518343a97e6775e9e001b0d01d7e2b87", 0x44, 0x1ff}, {&(0x7f00000005c0)="3df4f01184ed9f469f0e142f2d1bed7151b55ed778d92c920f2d705fc4f6a355c887ecb62c4af97d1a6511ef400c42a64b899d55d2b63357710a4b81deafaca1b123d251304a6f4ddf3a19fb7ae738fd3ebe584e300b705fc04e4e6f95ecb7cc8b832c6f1345eacfd235b28c13d45171df8e55e2c90f74b348e52374ff9482af4ee2ee9923c2490479fda9b0eaad4ea045c198e9c6f5ec0aa8b120f2cb1a583956de", 0xa2, 0xe97}, {&(0x7f00000004c0), 0x0, 0x188e}, {&(0x7f0000000680)="6d25187dd89f5253e5a5756b13abbd3ea8cd0a0f7762ea898f609c9c3b11c8572937c4a19171281bb4f698f38ccb91b3caf2dd81a82b122143bb8713ad0e5a8a330342e13ee3505f4738690e526808580ad3bbd371a3874c7d3594be025d3d6037018f6c465879d4fbd59bccc5ee01c38384fdae50da4ee2d83b1ad58044ca06b250141e6af919d7abd8197499c5e28a657e683b59ca5a291dc3596ec258c15cac4f549b3053aed29186e8271f4a37e6501d3451df62b07d905d6425869d288fbc311b3747c74ef02dc79beaffbabdb6f32a2c", 0xd3, 0x6}, {&(0x7f0000000780)="a656011e88bbb816469802a29854d2f53e3e822d7e30665fcdce5344a627a6ad96dc8694b4270ae7e63d43f4a66661ce3f8dfe721383f709500cae6f71630aafaeaa27cce73bc0abb01f36ea9f29ed6bd32eb81727a749a1ebae2fa28739356115d7", 0x62, 0x9}, {&(0x7f0000000800)="bd9bb3a29b0836b89deb3179bb33318a19fc466a2a009f7c368c5c7cbfba01747fa5d1f0a52c541fcfc5d0747934944d6073bf40d89fca219fe12ea143f1fa4fb488101abf4881e4e8c855bf1b8af5fa9286e0e2fad95ca937f2c44c8ca21af51694909ffd6611b46af2aff807fcbb6483c94b411f2447e4c09ff8", 0x7b}], 0x401, &(0x7f0000000980)={[{@check_relaxed}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '+$:#\''}}, {@subj_user={'subj_user', 0x3d, '!/-!(#.,\x05]'}}]}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[r10, r4, r11], 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x633, 0xd, 0x3, {0x0, r8}}, 0x7) 18:56:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 476.417027][T16598] input: syz0 as /devices/virtual/input/input1958 [ 476.435231][T16599] input: syz0 as /devices/virtual/input/input1959 [ 476.469526][T16601] loop1: detected capacity change from 0 to 24 [ 476.493076][T16606] input: syz0 as /devices/virtual/input/input1960 18:56:00 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 32) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000540)={0x0, 0x9effffff, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="110700000000000000000700000008000300", @ANYRES32=r10], 0x1c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@ipmr_newroute={0xc8, 0x18, 0x20, 0x70bd25, 0x4bba1cd5, {0x80, 0x14, 0x0, 0x6, 0xfe, 0x2, 0xff, 0x9, 0x500}, [@RTA_MARK={0x8, 0x10, 0x3}, @RTA_ENCAP={0x60, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x5c, 0x1, {0x1, 0x58, 0x1, 0x3, 0x8000, [@private0, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @dev={0xfe, 0x80, '\x00', 0x35}, @remote]}}}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x2, 0x94, r6}}, @RTA_MULTIPATH={0xc, 0x9, {0x8835, 0x4, 0x9d}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TTL={0x5, 0x4, 0x9}}, @RTA_PRIORITY={0x8, 0x6, 0x1ff}, @RTA_GATEWAY={0x8, 0x5, @broadcast}, @RTA_IIF={0x8, 0x3, r10}, @RTA_MARK={0x8, 0x10, 0x900000}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x24004010) 18:56:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 476.519608][T16601] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 18:56:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x5) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 476.667810][T16624] input: syz0 as /devices/virtual/input/input1961 18:56:00 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000ac0)={0x401, 0x0, &(0x7f0000000a80)=[0xffffffffffffffff, r0, r3]}, 0x3) (async, rerun: 64) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r5, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r7 = io_uring_setup(0x3b85, &(0x7f0000000a00)={0x0, 0x0, 0x4, 0x1, 0xffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) r9 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x2, 0x200000ce, r8) (async) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r10, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) (async) r11 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x2, 0x9, &(0x7f0000000880)=[{&(0x7f0000000240)='t', 0x1, 0x8}, {&(0x7f0000000340)="a969c6fb06dae0bd740391f21a91d891d9a15a2e1449d2624801953a3a1cdb56bb5caad8f3a77e76e3469c40b75ef0b25874138465f86f11cd9a59f2ada68454f87cea44b83a7954251d3252da0d4e733ffe38dfe1b7713d520485f48e0a42f3c53c4d03d4b8249c2af43097d110b6c90934bbb93c7e8203e21427723d3f64dc73921bdb15dff177", 0x88, 0x3}, {&(0x7f0000000400)="ac1f3f8423557900eb88e01a0a7689e7f2fd15d7846b61a9fd", 0x19, 0x1ff}, {&(0x7f0000000440)="cc7e0a14b762f6a1c3d2604c1ddfd7ea3a06ce163cd35d4cd10678e75ecbcf4b031469b2412d76cab6dac03f7065a8a9cdf2d47b518343a97e6775e9e001b0d01d7e2b87", 0x44, 0x1ff}, {&(0x7f00000005c0)="3df4f01184ed9f469f0e142f2d1bed7151b55ed778d92c920f2d705fc4f6a355c887ecb62c4af97d1a6511ef400c42a64b899d55d2b63357710a4b81deafaca1b123d251304a6f4ddf3a19fb7ae738fd3ebe584e300b705fc04e4e6f95ecb7cc8b832c6f1345eacfd235b28c13d45171df8e55e2c90f74b348e52374ff9482af4ee2ee9923c2490479fda9b0eaad4ea045c198e9c6f5ec0aa8b120f2cb1a583956de", 0xa2, 0xe97}, {&(0x7f00000004c0), 0x0, 0x188e}, {&(0x7f0000000680)="6d25187dd89f5253e5a5756b13abbd3ea8cd0a0f7762ea898f609c9c3b11c8572937c4a19171281bb4f698f38ccb91b3caf2dd81a82b122143bb8713ad0e5a8a330342e13ee3505f4738690e526808580ad3bbd371a3874c7d3594be025d3d6037018f6c465879d4fbd59bccc5ee01c38384fdae50da4ee2d83b1ad58044ca06b250141e6af919d7abd8197499c5e28a657e683b59ca5a291dc3596ec258c15cac4f549b3053aed29186e8271f4a37e6501d3451df62b07d905d6425869d288fbc311b3747c74ef02dc79beaffbabdb6f32a2c", 0xd3, 0x6}, {&(0x7f0000000780)="a656011e88bbb816469802a29854d2f53e3e822d7e30665fcdce5344a627a6ad96dc8694b4270ae7e63d43f4a66661ce3f8dfe721383f709500cae6f71630aafaeaa27cce73bc0abb01f36ea9f29ed6bd32eb81727a749a1ebae2fa28739356115d7", 0x62, 0x9}, {&(0x7f0000000800)="bd9bb3a29b0836b89deb3179bb33318a19fc466a2a009f7c368c5c7cbfba01747fa5d1f0a52c541fcfc5d0747934944d6073bf40d89fca219fe12ea143f1fa4fb488101abf4881e4e8c855bf1b8af5fa9286e0e2fad95ca937f2c44c8ca21af51694909ffd6611b46af2aff807fcbb6483c94b411f2447e4c09ff8", 0x7b}], 0x401, &(0x7f0000000980)={[{@check_relaxed}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '+$:#\''}}, {@subj_user={'subj_user', 0x3d, '!/-!(#.,\x05]'}}]}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[r10, r4, r11], 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x633, 0xd, 0x3, {0x0, r8}}, 0x7) [ 476.712009][T16625] input: syz0 as /devices/virtual/input/input1962 18:56:00 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 476.762240][T16628] input: syz0 as /devices/virtual/input/input1963 18:56:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x5) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 476.911942][T16640] input: syz0 as /devices/virtual/input/input1964 [ 476.924054][T16634] loop1: detected capacity change from 0 to 24 [ 476.942097][T16642] input: syz0 as /devices/virtual/input/input1965 18:56:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:00 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) [ 477.037459][T16634] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 477.048884][T16646] input: syz0 as /devices/virtual/input/input1966 18:56:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x5) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 477.142706][T16653] input: syz0 as /devices/virtual/input/input1967 [ 477.186927][T16651] input: syz0 as /devices/virtual/input/input1968 18:56:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 477.280582][T16663] input: syz0 as /devices/virtual/input/input1969 18:56:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 477.422498][T16666] input: syz0 as /devices/virtual/input/input1970 [ 477.444148][T16667] input: syz0 as /devices/virtual/input/input1971 18:56:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:01 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:01 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) [ 477.741004][T16673] input: syz0 as /devices/virtual/input/input1972 [ 477.755138][T16676] input: syz0 as /devices/virtual/input/input1973 [ 477.789893][T16678] input: syz0 as /devices/virtual/input/input1974 18:56:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:01 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (rerun: 32) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:02 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r5 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, &(0x7f0000000340)=""/196, 0xc4}, 0x0, 0x2020, 0x1, {0x3}}, 0x1) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r7, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 478.104545][T16696] input: syz0 as /devices/virtual/input/input1976 [ 478.137284][T16699] input: syz0 as /devices/virtual/input/input1977 18:56:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:02 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:02 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 478.353108][T16710] input: syz0 as /devices/virtual/input/input1979 18:56:02 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 478.458692][T16715] input: syz0 as /devices/virtual/input/input1981 18:56:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:02 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 64) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:02 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:02 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 478.738825][T16727] input: syz0 as /devices/virtual/input/input1983 [ 478.968833][T16733] input: syz0 as /devices/virtual/input/input1984 18:56:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:02 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:03 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r5 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, &(0x7f0000000340)=""/196, 0xc4}, 0x0, 0x2020, 0x1, {0x3}}, 0x1) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r7, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, &(0x7f0000000340)=""/196, 0xc4}, 0x0, 0x2020, 0x1, {0x3}}, 0x1) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r7, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:56:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f00000000c0)}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:03 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:03 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r7 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r11 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r11, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r12, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r12, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0}, 0x100) 18:56:03 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 479.175648][T16739] input: syz0 as /devices/virtual/input/input1986 [ 479.239840][T16745] input: syz0 as /devices/virtual/input/input1988 18:56:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:03 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 479.375655][T16752] input: syz0 as /devices/virtual/input/input1989 18:56:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f00000000c0)}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 479.494820][T16758] input: syz0 as /devices/virtual/input/input1990 [ 479.508495][T16761] input: syz0 as /devices/virtual/input/input1991 18:56:03 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:03 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 479.686514][T16770] input: syz0 as /devices/virtual/input/input1992 18:56:03 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r7 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r11 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r11, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r12, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r12, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0}, 0x100) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r9, r10, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r11, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r9, r12, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r5, r12, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0}, 0x100) (async) [ 479.765952][T16775] input: syz0 as /devices/virtual/input/input1993 [ 479.783974][T16776] input: syz0 as /devices/virtual/input/input1994 18:56:04 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r5 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, &(0x7f0000000340)=""/196, 0xc4}, 0x0, 0x2020, 0x1, {0x3}}, 0x1) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r7, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, &(0x7f0000000340)=""/196, 0xc4}, 0x0, 0x2020, 0x1, {0x3}}, 0x1) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r7, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:56:04 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f00000000c0)}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:04 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:04 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r7 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r11 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r11, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r12, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r12, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0}, 0x100) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r9, r10, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r11, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r9, r12, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r5, r12, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0}, 0x100) (async) [ 480.389995][T16803] input: syz0 as /devices/virtual/input/input1995 [ 480.404921][T16805] input: syz0 as /devices/virtual/input/input1997 [ 480.407967][T16804] input: syz0 as /devices/virtual/input/input1996 18:56:04 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:04 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 480.759554][T16828] input: syz0 as /devices/virtual/input/input1998 [ 480.789818][T16829] input: syz0 as /devices/virtual/input/input1999 18:56:04 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:04 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 480.876342][T16834] input: syz0 as /devices/virtual/input/input2000 [ 480.997375][T16847] input: syz0 as /devices/virtual/input/input2001 [ 481.039981][T16850] input: syz0 as /devices/virtual/input/input2002 18:56:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:05 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r5 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r9 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r9, 0x0, &(0x7f0000000040)="5a82a2b6d214ff371184e220b710255a14c59030fb9efbce22bf78fc54d2f809edda83c9c709b3bffa5aee6e80fd9c9ad03d12af", 0x34, 0x4004080, 0x1, {0x0, r10}}, 0x81) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r11, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r12, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:05 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:05 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:05 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0xf5, 0x3) perf_event_open$cgroup(&(0x7f0000000340)={0x3, 0x80, 0x81, 0x45, 0x3, 0x1, 0x0, 0x3ff, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x7, 0x7}, 0x8400, 0x8001, 0x101, 0x1, 0x2da2ac74, 0x2, 0x7ff, 0x0, 0x2, 0x0, 0x2fa}, r4, 0xc, r3, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r9 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x6000, @fd_index=0x4, 0x3, 0x0, 0x4, 0x5, 0x1, {0x1}}, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 482.056148][T16861] input: syz0 as /devices/virtual/input/input2003 [ 482.069777][T16856] input: syz0 as /devices/virtual/input/input2004 [ 482.100276][T16860] input: syz0 as /devices/virtual/input/input2005 18:56:06 executing program 4: ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 18:56:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:06 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:06 executing program 4: ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 482.525045][T16874] input: syz0 as /devices/virtual/input/input2006 [ 482.536835][T16875] input: syz0 as /devices/virtual/input/input2007 18:56:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:06 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0xf5, 0x3) perf_event_open$cgroup(&(0x7f0000000340)={0x3, 0x80, 0x81, 0x45, 0x3, 0x1, 0x0, 0x3ff, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x7, 0x7}, 0x8400, 0x8001, 0x101, 0x1, 0x2da2ac74, 0x2, 0x7ff, 0x0, 0x2, 0x0, 0x2fa}, r4, 0xc, r3, 0x2) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) r9 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r7, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x6000, @fd_index=0x4, 0x3, 0x0, 0x4, 0x5, 0x1, {0x1}}, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:06 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 482.840412][T16885] input: syz0 as /devices/virtual/input/input2008 [ 482.850341][T16886] input: syz0 as /devices/virtual/input/input2009 18:56:06 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r5 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r9 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r9, 0x0, &(0x7f0000000040)="5a82a2b6d214ff371184e220b710255a14c59030fb9efbce22bf78fc54d2f809edda83c9c709b3bffa5aee6e80fd9c9ad03d12af", 0x34, 0x4004080, 0x1, {0x0, r10}}, 0x81) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r11, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r12, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r9, 0x0, &(0x7f0000000040)="5a82a2b6d214ff371184e220b710255a14c59030fb9efbce22bf78fc54d2f809edda83c9c709b3bffa5aee6e80fd9c9ad03d12af", 0x34, 0x4004080, 0x1, {0x0, r10}}, 0x81) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r11, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r12, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:56:06 executing program 4: ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 18:56:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:06 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:06 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:07 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0xf5, 0x3) perf_event_open$cgroup(&(0x7f0000000340)={0x3, 0x80, 0x81, 0x45, 0x3, 0x1, 0x0, 0x3ff, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x7, 0x7}, 0x8400, 0x8001, 0x101, 0x1, 0x2da2ac74, 0x2, 0x7ff, 0x0, 0x2, 0x0, 0x2fa}, r4, 0xc, r3, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r9 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x6000, @fd_index=0x4, 0x3, 0x0, 0x4, 0x5, 0x1, {0x1}}, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000100), 0xf5, 0x3) (async) perf_event_open$cgroup(&(0x7f0000000340)={0x3, 0x80, 0x81, 0x45, 0x3, 0x1, 0x0, 0x3ff, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x7, 0x7}, 0x8400, 0x8001, 0x101, 0x1, 0x2da2ac74, 0x2, 0x7ff, 0x0, 0x2, 0x0, 0x2fa}, r4, 0xc, r3, 0x2) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r7, r10, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r7, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x6000, @fd_index=0x4, 0x3, 0x0, 0x4, 0x5, 0x1, {0x1}}, 0x2) (async) syz_io_uring_submit(r5, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:56:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 483.135005][T16904] input: syz0 as /devices/virtual/input/input2010 [ 483.182127][T16905] input: syz0 as /devices/virtual/input/input2011 18:56:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 483.399502][T16924] input: syz0 as /devices/virtual/input/input2012 [ 483.458663][T16927] input: syz0 as /devices/virtual/input/input2013 18:56:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 483.701328][T16940] input: syz0 as /devices/virtual/input/input2014 18:56:07 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) r5 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r5, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) r9 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r9, 0x0, &(0x7f0000000040)="5a82a2b6d214ff371184e220b710255a14c59030fb9efbce22bf78fc54d2f809edda83c9c709b3bffa5aee6e80fd9c9ad03d12af", 0x34, 0x4004080, 0x1, {0x0, r10}}, 0x81) (async) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r11, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r12, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:07 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 483.831312][T16943] input: syz0 as /devices/virtual/input/input2015 18:56:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 483.926555][T16954] input: syz0 as /devices/virtual/input/input2017 18:56:07 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:56:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 484.025775][T16962] input: syz0 as /devices/virtual/input/input2019 18:56:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 484.233228][T16978] input: syz0 as /devices/virtual/input/input2021 18:56:08 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 484.284327][T16980] input: syz0 as /devices/virtual/input/input2022 [ 484.345942][T16982] input: syz0 as /devices/virtual/input/input2023 18:56:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:08 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (rerun: 64) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:08 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:08 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r3, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) [ 484.810031][T16991] input: syz0 as /devices/virtual/input/input2025 [ 484.828351][T16993] input: syz0 as /devices/virtual/input/input2024 [ 484.842162][T16994] input: syz0 as /devices/virtual/input/input2026 18:56:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:08 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:08 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r5 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x5, 0x18}, 0xc) r8 = socket$can_bcm(0x1d, 0x2, 0x2) r9 = landlock_create_ruleset(&(0x7f00000004c0)={0x457}, 0x8, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r10, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x101, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r6, r7, r5, r8, r3, r9, r10, r3]}, 0x9) io_uring_enter(r5, 0x688c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x20a7, 0x39da, 0x3, &(0x7f0000000040)={[0x7]}, 0x8) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d4000/0x4000)=nil, 0x4000, 0x2000005, 0x11, r0, 0x0) syz_io_uring_submit(r12, r2, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x5, 0x2000, @fd=r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="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", 0xfd}, {&(0x7f0000000180)="64478b9c92e99597bd9e26d74c24189e222963a89cbe8bdb1317c4913255487aef5fd2a56ae3623eecba1e2cae43168a221d00456de9a4beb84204adb6fdad6dfc14fb1a910b39153fee2aa84321de722a0e2c8e17ab2ebae659e34065d17c7b1e819b834ddf239cb25747b9841a25260daab4648c1931c6e2ad", 0x7a}, {&(0x7f0000000100)="7f894e8cc6190748c93badd522", 0xd}], 0x3, 0x0, 0x1, {0x3}}, 0x2) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 485.014964][T17010] input: syz0 as /devices/virtual/input/input2027 [ 485.080055][T17014] input: syz0 as /devices/virtual/input/input2028 18:56:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 485.158044][T17018] input: syz0 as /devices/virtual/input/input2029 18:56:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 485.354290][T17023] input: syz0 as /devices/virtual/input/input2030 [ 485.424863][T17026] input: syz0 as /devices/virtual/input/input2031 18:56:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:09 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (async) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r3, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:09 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r5 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x5, 0x18}, 0xc) r8 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r9 = landlock_create_ruleset(&(0x7f00000004c0)={0x457}, 0x8, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r10, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x101, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r6, r7, r5, r8, r3, r9, r10, r3]}, 0x9) (async) io_uring_enter(r5, 0x688c, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_enter(r5, 0x20a7, 0x39da, 0x3, &(0x7f0000000040)={[0x7]}, 0x8) (rerun: 64) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d4000/0x4000)=nil, 0x4000, 0x2000005, 0x11, r0, 0x0) syz_io_uring_submit(r12, r2, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x5, 0x2000, @fd=r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="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", 0xfd}, {&(0x7f0000000180)="64478b9c92e99597bd9e26d74c24189e222963a89cbe8bdb1317c4913255487aef5fd2a56ae3623eecba1e2cae43168a221d00456de9a4beb84204adb6fdad6dfc14fb1a910b39153fee2aa84321de722a0e2c8e17ab2ebae659e34065d17c7b1e819b834ddf239cb25747b9841a25260daab4648c1931c6e2ad", 0x7a}, {&(0x7f0000000100)="7f894e8cc6190748c93badd522", 0xd}], 0x3, 0x0, 0x1, {0x3}}, 0x2) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 485.736806][T17033] input: syz0 as /devices/virtual/input/input2032 [ 485.761043][T17036] input: syz0 as /devices/virtual/input/input2033 [ 485.769398][T17035] input: syz0 as /devices/virtual/input/input2034 18:56:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:09 executing program 1: perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r4 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r4, 0x0, 0x0}, 0x0) r5 = epoll_create(0xb7) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x2, 0x200000ce, r8) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r5, 0x0, r6, 0x2, 0x0, 0x1, {0x0, r8}}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2000, @fd_index=0x9, 0x6, &(0x7f0000000240)="7a76d1", 0x3, 0x8, 0x0, {0x0, r8}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 485.988259][T17048] input: syz0 as /devices/virtual/input/input2035 18:56:09 executing program 1: perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, 0xffffffffffffffff, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) r4 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r4, 0x0, 0x0}, 0x0) r5 = epoll_create(0xb7) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async, rerun: 64) r7 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x2, 0x200000ce, r8) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r5, 0x0, r6, 0x2, 0x0, 0x1, {0x0, r8}}, 0x2) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2000, @fd_index=0x9, 0x6, &(0x7f0000000240)="7a76d1", 0x3, 0x8, 0x0, {0x0, r8}}, 0x0) (async, rerun: 64) io_uring_enter(0xffffffffffffffff, 0x2a71, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 18:56:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:09 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r5 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x5, 0x18}, 0xc) r8 = socket$can_bcm(0x1d, 0x2, 0x2) r9 = landlock_create_ruleset(&(0x7f00000004c0)={0x457}, 0x8, 0x0) (async) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r10, 0xc040563e, &(0x7f0000000340)={0x1, 0x0, {0x1}}) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x101, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r6, r7, r5, r8, r3, r9, r10, r3]}, 0x9) (async) io_uring_enter(r5, 0x688c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x20a7, 0x39da, 0x3, &(0x7f0000000040)={[0x7]}, 0x8) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d4000/0x4000)=nil, 0x4000, 0x2000005, 0x11, r0, 0x0) syz_io_uring_submit(r12, r2, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x5, 0x2000, @fd=r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="3b22982a05f0eecbf77d2b4bba783c92ef0bce9cf22a83537df9058665fd017dd88108539d59a794c8d4889ac523f20987a6328abcdac9b5acca6dcbe51822b7c28e36f7adb54efcd5280cbd905292ed854a7177d03edeefafb91b907a79c21f9aeb81215582eff1832b044b9813ef2b9e39030d16a8c7c96dc20f5f804a4f510843000922cf5cafb2f8b4ec1e2c1d430de028472e2571db48d286ae23a3a492e34f12ba74399f13e05c96843723273bba374f07249b83101d6f09ad2c61d5f3471cc365a5c7b4863edab8577b9886e385df3da332bde0ce969a3932e6ea78570ac50dc6b54b29a74963e4b33bd8eaab26b5aa912958c1aa833c1ab288", 0xfd}, {&(0x7f0000000180)="64478b9c92e99597bd9e26d74c24189e222963a89cbe8bdb1317c4913255487aef5fd2a56ae3623eecba1e2cae43168a221d00456de9a4beb84204adb6fdad6dfc14fb1a910b39153fee2aa84321de722a0e2c8e17ab2ebae659e34065d17c7b1e819b834ddf239cb25747b9841a25260daab4648c1931c6e2ad", 0x7a}, {&(0x7f0000000100)="7f894e8cc6190748c93badd522", 0xd}], 0x3, 0x0, 0x1, {0x3}}, 0x2) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 486.035723][T17054] input: syz0 as /devices/virtual/input/input2036 [ 486.058691][T17055] input: syz0 as /devices/virtual/input/input2037 18:56:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:10 executing program 1: perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r4 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r4, 0x0, 0x0}, 0x0) r5 = epoll_create(0xb7) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x2, 0x200000ce, r8) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r5, 0x0, r6, 0x2, 0x0, 0x1, {0x0, r8}}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2000, @fd_index=0x9, 0x6, &(0x7f0000000240)="7a76d1", 0x3, 0x8, 0x0, {0x0, r8}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a71, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, 0xffffffffffffffff, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r4, 0x0, 0x0}, 0x0) (async) epoll_create(0xb7) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) io_uring_setup(0x3b81, &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x2, 0x200000ce, r8) (async) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r5, 0x0, r6, 0x2, 0x0, 0x1, {0x0, r8}}, 0x2) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2000, @fd_index=0x9, 0x6, &(0x7f0000000240)="7a76d1", 0x3, 0x8, 0x0, {0x0, r8}}, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) [ 486.195713][T17077] input: syz0 as /devices/virtual/input/input2038 [ 486.216899][T17075] input: syz0 as /devices/virtual/input/input2039 [ 486.228775][T17078] input: syz0 as /devices/virtual/input/input2040 18:56:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:10 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x10000000) r6 = io_uring_setup(0x1692, &(0x7f00000000c0)={0x0, 0x2ac7, 0x0, 0x2000}) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x2, 0x200000ce, r7) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x6) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 486.400938][T17097] input: syz0 as /devices/virtual/input/input2041 [ 486.407173][T17081] syz-executor.1: vmalloc error: size 16384, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 486.408791][T17098] input: syz0 as /devices/virtual/input/input2042 [ 486.435451][T17099] input: syz0 as /devices/virtual/input/input2043 [ 486.491168][T17081] CPU: 0 PID: 17081 Comm: syz-executor.1 Not tainted 5.16.0-rc5-syzkaller #0 [ 486.499976][T17081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.510175][T17081] Call Trace: [ 486.513462][T17081] [ 486.516396][T17081] dump_stack_lvl+0x201/0x2d8 [ 486.521088][T17081] ? show_regs_print_info+0x12/0x12 [ 486.526297][T17081] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 486.532045][T17081] warn_alloc+0x221/0x370 18:56:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 486.536396][T17081] ? zone_watermark_ok_safe+0x280/0x280 [ 486.541965][T17081] ? alloc_pages+0x44a/0x560 [ 486.546565][T17081] __vmalloc_node_range+0x7c5/0x960 [ 486.551785][T17081] dup_task_struct+0x65d/0x9a0 [ 486.556554][T17081] ? copy_process+0x64d/0x5ca0 [ 486.561329][T17081] ? _raw_spin_unlock_irq+0x1f/0x40 [ 486.566539][T17081] ? lockdep_hardirqs_on+0x95/0x140 [ 486.571757][T17081] copy_process+0x64d/0x5ca0 [ 486.576366][T17081] ? _raw_spin_unlock+0x24/0x40 [ 486.581224][T17081] ? do_anonymous_page+0xe26/0x14f0 [ 486.586440][T17081] ? __lock_acquire+0x1382/0x2b00 [ 486.591480][T17081] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 486.596618][T17081] kernel_clone+0x22a/0x7e0 [ 486.601138][T17081] ? create_io_thread+0x1d0/0x1d0 [ 486.606184][T17081] ? __context_tracking_exit+0x7a/0xd0 [ 486.611653][T17081] __x64_sys_clone+0x245/0x2b0 [ 486.614524][T17105] input: syz0 as /devices/virtual/input/input2044 [ 486.616423][T17081] ? __do_sys_vfork+0x130/0x130 [ 486.616445][T17081] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 486.633659][T17081] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 486.639647][T17081] ? lockdep_hardirqs_on+0x95/0x140 [ 486.644849][T17081] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 486.650835][T17081] do_syscall_64+0x44/0xd0 [ 486.655261][T17081] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 486.661168][T17081] RIP: 0033:0x7fbaaec1b2c1 [ 486.665586][T17081] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 486.685202][T17081] RSP: 002b:00007ffecdf9d738 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 486.693628][T17081] RAX: ffffffffffffffda RBX: 00007fbaad424700 RCX: 00007fbaaec1b2c1 [ 486.701606][T17081] RDX: 00007fbaad4249d0 RSI: 00007fbaad4242f0 RDI: 00000000003d0f00 [ 486.709579][T17081] RBP: 00007ffecdf9d980 R08: 00007fbaad424700 R09: 00007fbaad424700 [ 486.717563][T17081] R10: 00007fbaad4249d0 R11: 0000000000000206 R12: 00007ffecdf9d7ee [ 486.725635][T17081] R13: 00007ffecdf9d7ef R14: 00007fbaad424300 R15: 0000000000022000 [ 486.733724][T17081] 18:56:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 486.787883][T17081] Mem-Info: [ 486.791557][T17081] active_anon:517 inactive_anon:223906 isolated_anon:0 [ 486.791557][T17081] active_file:3938 inactive_file:44647 isolated_file:0 [ 486.791557][T17081] unevictable:768 dirty:33 writeback:0 [ 486.791557][T17081] slab_reclaimable:19674 slab_unreclaimable:98041 [ 486.791557][T17081] mapped:27964 shmem:5056 pagetables:1761 bounce:0 [ 486.791557][T17081] kernel_misc_reclaimable:0 [ 486.791557][T17081] free:1202483 free_pcp:10762 free_cma:0 18:56:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 486.894058][T17108] input: syz0 as /devices/virtual/input/input2045 [ 486.946598][T17111] input: syz0 as /devices/virtual/input/input2046 [ 486.960323][T17114] input: syz0 as /devices/virtual/input/input2047 18:56:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 487.128957][T17081] Node 0 active_anon:2064kB inactive_anon:890788kB active_file:15680kB inactive_file:178588kB unevictable:1536kB isolated(anon):2000kB isolated(file):0kB mapped:111856kB dirty:128kB writeback:0kB shmem:17960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 878592kB writeback_tmp:0kB kernel_stack:12168kB pagetables:6840kB all_unreclaimable? no [ 487.177038][T17121] input: syz0 as /devices/virtual/input/input2048 [ 487.450772][T17081] Node 1 active_anon:4kB inactive_anon:724kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 487.508695][T17081] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 487.560972][T17081] lowmem_reserve[]: 0 2635 2636 2636 2636 [ 487.568581][T17081] Node 0 DMA32 free:855796kB boost:0kB min:35588kB low:44484kB high:53380kB reserved_highatomic:0KB active_anon:2064kB inactive_anon:888388kB active_file:15680kB inactive_file:178588kB unevictable:1536kB writepending:128kB present:3129332kB managed:2705612kB mlocked:0kB bounce:0kB free_pcp:43556kB local_pcp:21448kB free_cma:0kB [ 487.604325][T17081] lowmem_reserve[]: 0 0 1 1 1 [ 487.617900][T17081] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 487.651199][T17081] lowmem_reserve[]: 0 0 0 0 0 [ 487.656940][T17081] Node 1 Normal free:3947728kB boost:0kB min:54300kB low:67872kB high:81444kB reserved_highatomic:0KB active_anon:4kB inactive_anon:724kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:1780kB local_pcp:1780kB free_cma:0kB [ 487.692535][T17081] lowmem_reserve[]: 0 0 0 0 0 [ 487.698481][T17081] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 487.711526][T17081] Node 0 DMA32: 5359*4kB (UME) 3548*8kB (UME) 2882*16kB (UME) 1439*32kB (UME) 786*64kB (UME) 151*128kB (UM) 26*256kB (UM) 14*512kB (UME) 6*1024kB (UME) 5*2048kB (UM) 150*4096kB (UM) = 856220kB [ 487.734775][T17081] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 487.747308][T17081] Node 1 Normal: 132*4kB (UE) 30*8kB (UME) 27*16kB (UME) 161*32kB (UE) 84*64kB (UME) 22*128kB (UE) 6*256kB (UME) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (UE) 958*4096kB (M) = 3947728kB [ 487.765788][T17081] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 487.777169][T17081] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 487.786818][T17081] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 18:56:11 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f00000000c0)=@nfc={0x27, 0x0, 0x2, 0x2}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)="98", 0x1}, {&(0x7f0000000340)="5048ebf6fa520430b93788367934270fd8be51d993667eac571c6281f8b646d0ebdd9e12ee27e94ae8f4c4a74fa1dbe0f1ae61c44c4822f7513de469067198e36de8b8349189cb3bd669d22481b476d26a94e6df19f698401f262e463bff2f01417a363dc87e14345ea1ce4a8f7b836a5d998ead665e610505307f53ba9fdb097a18e5d8ad86560c64dc7a", 0x8b}, {&(0x7f0000000400)="2c23cb4124f7da2e1bca37210a3aa0c3be18d625dcd9eecd50eda129eb5924a44bbc70c010f9a8d716716cfc75ba417b342b8a020325ab04abf236e7a2494114a2e168cf2f5772d54e0f00c6102eb6f683a7998e0e4a7ff661bfed8d04d51b94e1d78a181d3b76897aa810100b9362f68d3f762658305893324e9ce070703c5531f06e578c", 0x85}, {&(0x7f00000001c0)="747f1182eeaa2043e4acdb778ed77758df", 0x11}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f00000004c0)="332af26d848791f66b6859b23cc2a802322f7fd43734a557fbd9ecdfc22fce76dfbbeb7e918be141281ce82fb21d215537f1f3ff03d35a6163cfdd03a8b3639663c1fc1d548b14e58e34d68976408d13013be5230577b586588d4bf1816c7f0e42c7ee07a07b9341c91b1f62ee057dbfd033d957e6474a531251601ee0681713247e852fbc9e772cea9b19f95b08e64f3df7", 0x92}, {&(0x7f0000000580)="f93dd421f1a5946bdb60d941e4aad0293883618ed866c0951bcf0d4d1d894c28304670d1b7542331c3d59918cc57e563070ebce9e8272b70c8156eaa05460c4176453079bee174d6b7c23920ea0417275263c5beb2460b5e6f6b3a3bcbe216b08c27ac61ee25b3979c0de473ca4f8a4b3bcecda3f1a08969aa85f210bdf3e92d81188a10a157296d9f450a81f03067d15c0e74bf72ba35958b422726", 0x9c}], 0x7, &(0x7f0000002340)=[{0x1010, 0x113, 0x54e, "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"}], 0x1010}, 0x20000004) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000d, 0x1010, r0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:11 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x10000000) r6 = io_uring_setup(0x1692, &(0x7f00000000c0)={0x0, 0x2ac7, 0x0, 0x2000}) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x2, 0x200000ce, r7) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x6) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x10000000) (async) io_uring_setup(0x1692, &(0x7f00000000c0)={0x0, 0x2ac7, 0x0, 0x2000}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x2, 0x200000ce, r7) (async) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x6) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:56:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 487.809978][T17081] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 487.819450][T17081] 16709 total pagecache pages [ 487.824190][T17081] 0 pages in swap cache [ 487.828571][T17081] Swap cache stats: add 0, delete 0, find 0/0 [ 487.834733][T17081] Free swap = 0kB [ 487.838780][T17081] Total swap = 0kB [ 487.842599][T17081] 2097051 pages RAM [ 487.846458][T17081] 0 pages HighMem/MovableOnly [ 487.852090][T17081] 387047 pages reserved [ 487.856252][T17081] 0 pages cma reserved 18:56:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 487.936052][T17132] input: syz0 as /devices/virtual/input/input2052 [ 487.958794][T17131] input: syz0 as /devices/virtual/input/input2051 18:56:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 488.241989][T17150] input: syz0 as /devices/virtual/input/input2054 [ 488.287028][T17151] input: syz0 as /devices/virtual/input/input2055 18:56:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:12 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f00000000c0)=@nfc={0x27, 0x0, 0x2, 0x2}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)="98", 0x1}, {&(0x7f0000000340)="5048ebf6fa520430b93788367934270fd8be51d993667eac571c6281f8b646d0ebdd9e12ee27e94ae8f4c4a74fa1dbe0f1ae61c44c4822f7513de469067198e36de8b8349189cb3bd669d22481b476d26a94e6df19f698401f262e463bff2f01417a363dc87e14345ea1ce4a8f7b836a5d998ead665e610505307f53ba9fdb097a18e5d8ad86560c64dc7a", 0x8b}, {&(0x7f0000000400)="2c23cb4124f7da2e1bca37210a3aa0c3be18d625dcd9eecd50eda129eb5924a44bbc70c010f9a8d716716cfc75ba417b342b8a020325ab04abf236e7a2494114a2e168cf2f5772d54e0f00c6102eb6f683a7998e0e4a7ff661bfed8d04d51b94e1d78a181d3b76897aa810100b9362f68d3f762658305893324e9ce070703c5531f06e578c", 0x85}, {&(0x7f00000001c0)="747f1182eeaa2043e4acdb778ed77758df", 0x11}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f00000004c0)="332af26d848791f66b6859b23cc2a802322f7fd43734a557fbd9ecdfc22fce76dfbbeb7e918be141281ce82fb21d215537f1f3ff03d35a6163cfdd03a8b3639663c1fc1d548b14e58e34d68976408d13013be5230577b586588d4bf1816c7f0e42c7ee07a07b9341c91b1f62ee057dbfd033d957e6474a531251601ee0681713247e852fbc9e772cea9b19f95b08e64f3df7", 0x92}, {&(0x7f0000000580)="f93dd421f1a5946bdb60d941e4aad0293883618ed866c0951bcf0d4d1d894c28304670d1b7542331c3d59918cc57e563070ebce9e8272b70c8156eaa05460c4176453079bee174d6b7c23920ea0417275263c5beb2460b5e6f6b3a3bcbe216b08c27ac61ee25b3979c0de473ca4f8a4b3bcecda3f1a08969aa85f210bdf3e92d81188a10a157296d9f450a81f03067d15c0e74bf72ba35958b422726", 0x9c}], 0x7, &(0x7f0000002340)=[{0x1010, 0x113, 0x54e, "dbc2cbfe91abf8dc954281760a4349a90efbfb2b7488a0e9a21658fc56ab28a90ed109cc2edf59acb8caf5fa6c39713903b017d8733efdeb81c74645fd4b8dc1c3c8dafca41269de310c3a9f8dd2bbed19e9fe9bf6579c321ed77d1a67de2af7e5afc96c02d472bdf00c10dc9737d8fb7602a8c64a2b986d89315f1405f60e8974932501a4b6bf06a38ca448b8c43e94e69dc7e9907122946d9735d9fb2b42ec3d2623c82ae49ce4a4af7d8ab7766829d4a69ad80ee04223339d96b186fa4ea923ee6905c96aa9b453ef19ef83b687453ee2ddb32bd06ec50af794f10a78e5fb4336333760d2d342b9f3e211d591964411fd5471bc9a3452be1f324946b39bece9f414b1813af0778beade2f63a337296359efe8bc006f2f3c2a8226083d6d3b1692828d22e0f0fa9bdfd901fe88dba77e4506ae232ab8468c7bf9c3714bf55cb8943cf8199b5be51b33e5679a343d81c1c69b355d07e247e1dabf9d35f194b80b6d751281858c73bc95180b2d6819101aea267ff35b62beaf727890ead9fec703177e3b071447b8cf7837ddd3d629e8e15adb6f55b708202483f4bc5bdc42c3c3a33b3e157a0d3b8dc8a01c2938239027d91f619d4cd542790f8bde64f95a12fafdde1e3a9db8a8e4c8b965bed418d8f54c1eb0769a22fdd885b2ef889b83df2aa2eaec7015b995f07abfaa5fb47d2c0785ac7968da90b4b690aaa54af67c9b5b3950b7367a4c7b5e1d8f9d83817e7d029a813c5de228152a2386ec13d76e87b4ae94bdb660f20fb8a5d4081819fa612543139b1732824823087f1e0b80780b0e50a21423e39c737c21063cea981a99afe8ee49548c686f1b2e8c46f46aec18448dc52de156e477896350c9e17f9aa2b30699ea9a226e2f8915916eb7551227e224b7555e4c071b88a46ce4c95c1302781beff17a04ffc97f15bd34296197edb0bb567f82be953a2c5f22828e17ca5cadc13f3295b2ad2b130be307fb542f093ff04622350f09c54e8aec23163df5d115a3c3294ad30a42da43ddbe5bcd5e8c6c1a4dc36736a0c58a7dce6bb3c62f6a7cf18b7a5e92a9262c2654bad5a1a1bb522b4dd75d05be3464341b621bb31f5042f6125e98799e8018f4ce1698d22aa26c6c9f4aa706977c04431209a39b1dac6a9162c08e2425fc074c96df80fe143e98597b746eeb743b3b061a54b0a2c58a0863c15eae58355b93ae6b4def8684038ec3996f844404f359fa5ef0e92c934f713375812e508520a20c8959074fbab0343693bbca8b1c090e621790f692fc916de8d3da7f179394978168de30bfb9cb97b413088dd5ea1bfc647d586966e359b34cf0b48764057614ebfc577322cfd5c922d4c1b722256ac12b16107015644af3666f3a7d98ceb937c71ad6fd1404f8e893deca3e918bdaba1221b19485b53fe6478aa27a7056c5487f392947f68af30eb830a1f56bcd36efcd427df3f932c895728ceb2332473744ef127f5b76c51a4d20144cfb50228249d1598cebb0ab20ee8a1d15e4c9046f02b7329aa4267a474e547ed2d547ba1677c7f6f693fe2a1cc344d2e34ffe9f2bcbe6ac644a2d3d21c3581bf8d8fad39378234cefce6e04879e0f00f752ac5a2f17dfe671c758b347fe06f12ce221603ec67714a27201b1e0f448d2abed4cd340128e8122116f9e0be110fcf6bd1c8b0fb59ebe53774a5868b485fe6895f544064a88ab72c2557e27e6797ad10b6bdc8fda64b5ded60dc483dc620c6ee32651ae7f5399cd66833d466eaabbcd8784b4565da4abe43310177c13d78459cf3d5a0bf077464a132c7265fa3dc60c610faa83246b01c741125238b44deac553a297e141d2d53ed1230272b8db94c2fb2df895c2301328bc5047dabd114a5f1f0692fdc62690b559493c173b3c4d854c858f8fecd022e661d491f739dacfdc657e6ee63ccb82cc9835b97d47111c2fe90e32035fe648c8176a7d8017d5b7b372767bec884639e4c1f91170f43e59a7fee9295e7329e98a0de5041dd960c67f51081d688b5d5695a0864049396fbd409662880e472ce231c5d6faa66fa36eaa4ef3771ebd20ebadd9fb4ee62c4ef582ac9ae99d00a878949e55a4f05b5cfaa922918c7e9b63bdbc2d91bef9ba6f1ed7f9002f601196e390606214ab2f41853be51a184bd8c583dca3ecdcae3127e0112eba5957706ed0b0b0f68626b2ebf24d716786bf6e21c275ea11e81c5a890ea2e8780c580c58e34553366ef6d82816115bc9e6305cdc07103dc149306d9cdc88f0abe14c0fe7d8253a0e88235ec5dfc8f5a24bd80e26fa6addecc79fb0697bc44733b55eb47f4875c6cafd4eefd4fc4061304677f37266a43edd84cba02c22b30495f8c4bee1d324946d1afffb11543e7102592b16a5c48eb0882d537257339cc70b1e952f8253ea93cba3038e0b530c3e358e54f5f3912d5f03f7beff8a9b47a52287f041090fb91cde83edf62c45472f07c9017de71a40ec529da2f74c89ddca83cf52f5b0062fbede72b2428d1b0c24cd4042ee92b9f4fffe6ef5bb2b384357702acee99618fa26fc5590332f8f760772c0a3e01be092052f1e6d9f2dbdfdb84df6602324ff9983af95c47f67f7f1c839278caba62549c8907cdca094f59d960f1f44d508c03a21543e5d08f2f5acc64bb6d1c45632eb52ac74836125d241d7a0256f4310ee3c7c30247ced9b2fcf67de14f73089bd1a99c83cb62a8497f76d59c608a8069b23f586b742dceb8b42b99692beeb4e972d6ed185553c4996a0c4009146fb388c2662427f662d4133981b35f25b60b14eeb1f4c49ea15aa3a3c1a7139ed3a3dbba897dc830e93b63e0ebd200e0f377beed1b32d4e772b50d3433158663c2a66712725f1707703beccdae5e7eb5aaf4c45a7b6fe28ab22ffcdb16eaddb886fd1c47ecbfaa4de9929d58737cf8fe8eed443f2f675e281de29b13c11f10fc14b58b07fe8a92079ca99d6df8e44cb92c4e1e12d2a42a950349d3ff1f2f89a38228f3685acdc3bac1e26d0dbb8af5af70a58e46427fd026f84e90423661fa326409406e3e1d9d2276f537243a85e5f94910686d84d654c7e05fb3d17477437204f13ce115007be15de4095f2c0548923e4af16d9e43eb625deb8747bed9ae3a1a6c374d13cf7f4e31b1b118b420fd9a06cf6a269122ae12fd0a9067bcbd093a6daa92714b61c9b39bf11ea9c6d60e92c60a1e2fa851ca7243bb66942a3b6e5ccf00aa0823ecd2d49887f8e45468a837ce2eff422af5344e2ce365a93e5047d1bdc0336d9725902b6b7760b0ce7fc01d17b00fe2381c2b8a36935707ba9bebfd1f2fe8e60d07962d9ae2371e044daf28ca866999dd2854c18c65377a0635d97c143cb10a00c9df5ebdd4fa964be323b88cbdc8336841bd2f7d7576a284ce27d448d23530b607c8d369e14600b9527c3834221270c13ff4671542c512b919fbe82b9919f0988e329cbe6fded06516f00e3c7755d97a2cde45faad3de2b01e0995e2ba5ea372d229bbf17d3653ac7a46ca7f8d8aec67eb17b5508ed5ce82c687f1cb05a321f9936a7ceca00786e5ae0c7c42f98c3c0ddf3d2c5bd560958f634689133fcc5d7803d5e840fc6f923d93575d11b88380e53c32369931f1f5346d8d17fb46e1557642fb9722402cf75c9d75fddcc2bef5526bb431860f2b3267e21ea3c0f37a8960004d14c5aa7432e9bb7cdf64ce0cf428d1ff18d298267a238aa171df21a8dbf8e42fd4fd6922e5c884eb8470e8872c69f344817eaab0118119abaaa59905a4f3028f96c20addea1f7dbcb6c19d1164a8043fe6b5f505171fda5e80fdbf2a10fb63379100b2b0cdf6f5d3283649abeca4b31335e6926efdfffeba72372fefb0974dd7903867aaf96da5cd7a4b7100a1135309220a81cf7cb5a6acaad3cfebb90a050d9eaa87b3105478bfc102336337f85e6b4acca0818c0e2910016d8fea914c89b09b0065248c9ad7f574d404ad5a91637633d3d8342e7bdbcd71b948f59740648a73e85a4ab62621f783d7557d82781465f8a1b2a7d9b465d7e3a87f440a672c1f503294b8f2087674e4bddf1312eb2a8280c02c4eae6e48184be01ec620e10ba697a0cb7c7ad2dbc26f90ce73c3d12d325cb8631261360056a954a4462e420a2eb008df6b8e915126b36aa57b3dc12e8cc62a19128875fb7acbd6aa831e6c4e21cad8fd030954cf0329175758f7395024c3f6482cb6f3d071e754e743bcb67401c11ae138aae123a7473fff6347f2446d5515af0a2fb7958a065c70a1b6a8ec267313509288df31ded0cce630ace90e6c22d16f9a6c2a5050eb5a1c240bb62aeb29baab70f692fe275c78c35954be1adfbb384e47e4aa946de83f32b8202ccb2f77b10a2be098b2a64cff44356d726819db02ce28dd7cae23c2998a777725d28142a8b9399d77b0d21add24bb41d994587b25932a38555f0f98147a2c9b26b112c38d2fbe7c31c5a52a04639fbb6d23324fc992c0b0d86fe3cdb68213ea06ccc4649cd56a6efebc0e336c03a9a88a064ba4bf3411d370bff4f7a6e53eeb4e0e3342709e4bfc43f2caef99e3aeabf06b570452ff7736940630d25ab03341eb6925222d192df54bef54e2dfec03bdaffb05807bcaf2c9c48cde5cd035a4565a71db2f5fe38919ad744c4b937dd559cae8d2ec681877a2532dc2cc9ff7072c10209f7ce5923d9161fd7897250608d8ced960c1cc199970e55d706e7c5873f09295bb0812e347b59a681ea9694fd3db7335fd3a097076e187456d8a0ceb0d3f628ff6b462b5de7d462c7f25f60cb27fc5812d5df32a3537b697c24faac7c5f7db9a3f68e05a1fc5105ac3d3acc1c4cdfeacf4e6abc14e2a57ff476e730a0ae01fe7a71a9a1448e6d2dfe3bb1334149c0e7cb5661744bf2ec4c6afa6a2a01e00d4a9667e3978262a49f594a2d6ca081a05c09f037ebf4cba446c4ebafe60148fa7a702f7dfdf7a5a026665d1a0ce74046f2db5dd953f7a63f59288a987160a55b7ceab0e6fd759941afb4038f25b736574e7480548727bff05183022e6169c4197fca3abe97b21cc616656da23e8fe308c34e485b502592171d3e4cd7e68b2bf4cd09a7ba2f4c47a949c94a05defa066450ffac0a71d12ff4b147e7b2a1af68cc799a9008a9bf9462356162a604d97e64ddeb2d8240d21f8cda707d9422a0878aab0bae7f97420d835ede44b02f41c8412ab4577a7284eba698e33030654e1f1991e14a5f0c7a1e6ecfe3c46a2a8677d5839b2a9d8b2e1b59506928d459aab3a6e8fcf5e1f50d236efa6e18ccb6df1f7a52d148c0163b07b79498db92d03552edb28942c333d2b7e8ff986431e9e1b71b2d9e6cc8a908042b9f6242c63c4b88ac1238252b2ffae791ff3c5f4bd30ce846c03636a4271aaca541fe2f72e3136b173b839c8a3947ebff1dff7da0684c29caceef106ab50b1b5d29248a18a573ad9a9a16711aee3079510c6b6b4a9822662ba42510646a5ce890762f974e5f2360ae8103f5aa42036b063875011e8ff64c1659a761118f23e5c73e622b6216779a816dd4b986a519e83f6463e2cef4af2c7421b82770182e51625a64c60a376f4bf29cda3685aeeddd9228827ac42ea20552786481e1677b9292c4a783931afe7da0d4eee256fb73027d2042c8889f81a70cb9bedb288549888dea1e68c449165dd81d485f4e62138c0c63d2d2a7ae1c153dbc00f3fed8167736dd757f94d297e3b6959f470d0c3876312adb137507850b6f78699a997722e734fbf9a78a4cb31932dc271ace2689bf4bfe8c2b9c1265b4c8212bbb87"}], 0x1010}, 0x20000004) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000d, 0x1010, r0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 18:56:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 488.639578][T17159] input: syz0 as /devices/virtual/input/input2058 [ 488.714393][T17164] input: syz0 as /devices/virtual/input/input2059 18:56:13 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x10000000) r6 = io_uring_setup(0x1692, &(0x7f00000000c0)={0x0, 0x2ac7, 0x0, 0x2000}) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) r8 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x2, 0x200000ce, r7) (async) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x6) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:13 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 489.432751][T17177] input: syz0 as /devices/virtual/input/input2061 18:56:13 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f00000000c0)=@nfc={0x27, 0x0, 0x2, 0x2}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)="98", 0x1}, {&(0x7f0000000340)="5048ebf6fa520430b93788367934270fd8be51d993667eac571c6281f8b646d0ebdd9e12ee27e94ae8f4c4a74fa1dbe0f1ae61c44c4822f7513de469067198e36de8b8349189cb3bd669d22481b476d26a94e6df19f698401f262e463bff2f01417a363dc87e14345ea1ce4a8f7b836a5d998ead665e610505307f53ba9fdb097a18e5d8ad86560c64dc7a", 0x8b}, {&(0x7f0000000400)="2c23cb4124f7da2e1bca37210a3aa0c3be18d625dcd9eecd50eda129eb5924a44bbc70c010f9a8d716716cfc75ba417b342b8a020325ab04abf236e7a2494114a2e168cf2f5772d54e0f00c6102eb6f683a7998e0e4a7ff661bfed8d04d51b94e1d78a181d3b76897aa810100b9362f68d3f762658305893324e9ce070703c5531f06e578c", 0x85}, {&(0x7f00000001c0)="747f1182eeaa2043e4acdb778ed77758df", 0x11}, {&(0x7f0000001340)="118a514e8680cb7ef05de1d4b47f2d9c17462c50a64abf8703ef05f89d8b97c37f17ced9b82f5841634396bebceec219051afe371967a323cbb007f80059aa89ab35f4054e7d2499afe01d12e1a23f968c35c91dd2a5da7f8b23c6b537fc875cd816cc32549c6a17978fce19933c8f5582dc6cf0f270e5a78aefabdeaa4d316a29a16a9aad836af084d4c72c3465ad699ef7a389f3bd936c65600fdf5ed7522d3a027f45f5aafc8eb1034692ceabda661dd025271e448c6fe91557e04e18f0dce656e9bf16bbc292278ab447c6ae3c17611f57651dc33846f58b7aa8c1eac0c7b1374514f8637b5bcb029fc1b31666c505c9894aa4d95c6005ccce5024db0611f94350063a4611533a9868f0d12edd64368f8dd7cefe9ac8168f27acc2d1de015d3f6f9a666f4bdb9ed3e5411e7ecacec518e47165087843375e959aee76254a507f4e2547f226f5fc5e1786a558760d0ba3ec3ad63a5ac3ab9e07065cc997043ddcd6a4fdc3533b44d76ce8ad89396bc6de886516c185224c29189a5469a5627a0490e2c35d04cc87a4e6441eca745fb165a19a9ceffda02e4d52dc6192077cb42e7327f35156211accbf71e56307d281f5a25b4f70c3e1665f8a9d9e328754f69956524be985b067c34373ab863afb168619a8d8ede09e6c1557043567d7287186c4a2228e8449409d6290192ee73582f3b2793f83667f8076064ab3e9fd080f47dd2c2c0ca88bb878a11c6024a2163fb039d3add4d4209db98ec9b0bebce23a52236eae5816b7048c18a255d3e1ea95c036fddadd96a30cf667178fbb5f3a3e016d1662d35f05f28f6f0919fff913f470c332d22269b4cd74b7f6400f1987985cf273bba2b94a218d73bc858a65af4a692c7deebc4a572b49d00974444db98395b841956e02e965e3e7d5881683ab7c783baa4a6780d07d8f9ce79dc9541f95a66bf017c088ad814b5f337ea12993b17d4b45cccdd1e145e081f76d6cc0dfe94e27f6f7b9875b7135791dd92e880a30628948c231910fa012a2edc1dcf1639c8121c72b42dd657234428b6ae3d176201410b85fb5faeaaa4f7dc0676c5c22380238a8243c121782c709d5f68e501bd9346ffb70b87b91a01059ef355001886d2970508e6f66fcaa52015578ecd61d0291b84131e79f0c427e34da8d169b9321dad52f61553962a5abb81a2ef5806504c84c11efbe3464d1c0e094e52011f2564477fe79e476a34d356488251d7450172533c171556bcfda483a368d648cc3efba0493ed3a98e92a108aee883e1212d167061d490eb23a47fa7dd64bad60d32bca9e829d705c7c2f9416423f14d65fc381e0412a7283344c8951bcfd16a5667087214909200915b8b1c92f80a6d887be72b33eb87ddbd4848ad0cd867f90020ec1454ca5c6fd18b38656c0b8353ca2c83d1cbdb628e30bb2c510a31e715f85a4933c0309b5d715b769c063246f3fdd17da5d8818e71e79760c64a7087de246b42f86bae5f569e255e48404766f4b180f86d1483d6f0ed311015736bc501447a4c634dacfb631dfaaa40f4d09744c1d86d45414b2c7d4bad9acf66b042cfe8face2f4781d974aecdd72dd40b8873750a2901724d24e04145ddbfe1447e1ffaea33a93e219880d6f5bf2ea8f096f4e218425b7de7184dea5e0922719aae87851143f7d69f1a913a5cab70497d544c15544eefc71a5072529f1e68a5651599b6ebbb6f59ce4e3bca4c1bf45d74763c5efcf9d0510065477355e88bb3d73ce605c1c76b349adbb6641b76c5f58e40a2b0c7b4a6c90b326977aa8506df3890c54d148332d347e3ed6645712f98f4447041002efd909d1da971df539612dd0e54e292b3fd15541a0438fafef293ed6908813a93d7849eb760509f5f7d245e167d2e899304dfc8b1ad48007538dc1198ec6345cb47e9490caa0db2f276577ba66978420bf7c7951c5df5681e282ecf95447d8c41bdd64319928eafd36621290b910a47a12e0a694384aae665e3177011dff01405b7cc5cab9944fee8fcd77a5a40270fc59541834aae6845198ad560f2b4d7d1960516d28260ee465aa4be9b7e6361799bbec76551baa725e556fb073c5a9b293ef7766f24fb296edfbf5d33bd326b4a9d430f24a9f3da245e977447b86e031c32294fd585ff5ad3c3543aa0545de57d61acd09010fa3c60ebe92ad075f6b1853297558a6027322eea9cef6a5e9ad75982439e229dbf04fcfbf68e1d4a96c0c9bdf7e89d21d75c8197fbdb0bd669396d5ef8a1e10e98fb9904bb78a7a1d099b26b6ee03256e26874517f7ab3279146ac898b8884a67df5745f08b89e6fa43af5f7d4795616f3e5663e5898a6adc9bfb084bd6c2599a7c7ecf813bd882dcd11f2a4c5b1d15a20b5bafbe95eec71664a4c774364b7bfb983ef4fdddd6ecf2c28945516e06e00964bf304804b1820ebbf95f0dd96f047213eb5743ea0371ef37d9a8b1e0bec4592f084e5d6ab69273744ded27d291efffbe0e89d78bff428af5abd960b2a27729441e346d03212cf4d8f571418c86a66b04c06440cd19eec69a2245d38c7210263994ad9915e406a3ce27ce48c55a3c63a634e1338015596ad87d129d353f36a1104ed88afcdbb0340588834f292b44395e2c3579d7a2bae9730fe0417f3d44a7633709fd3f4196cfee52cf54ea6c42fbd37d9a3ea63bf33789175aa1a18a63e185d590a61e5b6f34236fee30d38836a4ffed468c23601bf2f044398194c2395fa37275a1c61c4054c56b507849e638ea2313af3c7fae7c8d4ac0594609c6161cd7c8665974983c8376e248c1cabfcbbf60e5a1b335fe06c9e77f153d720a092d5d1021b9567bbd8293b2ec885775f70e0896667fd46bd39174b4a869ec9c4a844fad9d574f31a345fbf2042d79e74d5dad95b6e1c3134c7972f156c2afb4acb4506a6aaf2a850025de34de324ae18ebb9998ea1c4989aab056621646afb7a9eff99430d706bce9801e825143907fde744456384fcf78619066c9ab184c818a3ae69b617823dde899404a29ae4b804de76d72f69caa47a102e8417b44ad906eb51ec22669354b25a1ac213b9384cb6653315494f988f205db41bf4e6dbaa6a5ab6c196d033ce1c6af89c533c39fa4abc81834bd2d2b413949f0eb213e7b6e555e72692aa6e8b22790f8135911cf532ef6741db8f2e35b928033d6608f572b2f0a15c3cb2b3e9fdaa1c5efcbeb00cca485ab2c915c92d8588fa1bdff48a66c17036ab754fb6d9c8238363c29dfb56898e3c243aa7b2d3c2365ce4043723459f0b11cdedeba9345210773d1ff2f31b327c09fa7ad54b39c7438ff86e5bff00e3bbdc3e7f654d2dbfc1efd4489e8d79eb768fd836cbbd64947de2bf7e204e507a9239279c33c70fb6d3986d70b379ff2ec8ffa4bdc2e9112a483bc861eb5205ca7867c1b0c0b81b1eb6f29b68a419ee9f315ea00f5a77f8fb6fe1fbebf70d3bb6c77a209de91d438270a63c50f7898ffdf04d7a19245a6f7ca3abe6a06b300e44c0fff2231fc6ec210289cbf3f0cabbe6a29dc0ca7d0e2dbe9b1a752b5fa9c3334b3cb05c4d64e5290b6ef220733188dcf2ff85b4fee8b5992cbe6fe7160ae392b48f821cd5779d22d1dfbf235482ede563b161af4d4aaea29cdf98f8332a5cc8470ab299d1f136ac0994816020d3200195097be9113b9990f0887890e713a3ae184d0c16003d0701e07eaec0f3c34e81d43542a67cbc0a66d71d3a6ae7685222206159bdabbec7a8e42d030255ceb326556b9485a864fbd75df2bdc99baec4ca73cf965fa07b3913783b79ab86897ae17401f663756942b6141d13ffd39f948d8eda91ad7fc64680fd48070014ff0b12fb0cddb58ae0936c98dd40fde5bf92239c5a03919b5228e900b84e81852334eccba82f5bedc440fc4f86a1704ed9d197388eb0375dd1c077d96d3e3e639c5028665075ffe4cc8532ed2753e8fc1d9be393c48655f8ccf52091b901ac111055a01437cb54ef998b31c1d091d30b1b6843dc8a440c0dd87d27b21e052a15385d3c2f98d641c807aa5ebf370a9a65939620a2e1363e9cfb2943bd4f852750e3edfc08cb1611ef3dc2800c0c4e934b5a94ceb87faa926d56743dfa3adfc8563de1d06e54ac01608f70fe05c8314a359b5dce482349703eecc70c4e8b02b0cca6e130c47e4a7baada328c937099c59a976d26cdb2815bb0a32914a5f855b28d4d7b0b1d67116d5ae45ac473acc6375e75799d4c1299017c8a977704f64df477e4ee6b234107c68abc7c7114c92a29e38aedbd548d58e01408e2f7fedaff459a3d6912f5e88e1aaf46cd2059c549254b9f53179296ee6f0d285ef5e929785b627c0b9c310dddbaa06849a8cc78597cdc2f551690165aeb2bdbba9dbb8dd4929db6f21ad19d54c11a3b870832374954d3d86ba878dfe513a6ad30a5bdb1577ddbfe70991038a63517528445f21d369b323486928b8ae7fb998c50946fbb2fa316394008702a2ef7dd0bf9010d833312e2a30638db20fe7e02973b8a928738521d55acf2c7c40c5aabd88db794c71bf9d46044f98dc0844ab8a1ec22fb42319d98d919415c0068fe17cb09f021d0534d1adf7fab7c6714cd1c129d4ee176af2bf6119bdef8e0a841766861e569c2cfe9933caf623ac990b831c3cff4ac9e74a0a35e7c61bf4ae0ce5966bef70512dad2d52ebaf7ed97860dd0f5d7ca7850d56e2446b24e24704c794fa094f7d32a176e1b04afa7e634af790cd9414a611b09ee90111c20becf7248bf6cd7fa245d0e136c6f5e3a9991d4a292eaa360656065acf12400d208eedfd9e03be01ddd119a438b67e2045d969eaef21c73260ef3c957bb87d49ada56efc78524be1274f18e3ace8e7d1c92b4362cc05a23bb2f02bd484b4fef25c1b162b685acf5eab19d11ade5b3765fe40df2a945c51c3af729fe6cddb25c5db4a3e273787b31e82f49e58ce82d97d1c106a2c6448bf8f43af198a97b0cafddf01878754c9d10930722b0d4c753dfe3f23250e72e3d74b0707c738c80747d63d075353b927440636546641f3810854a2430a6a161727b54ef6ad568105039d85f0ef4d0e23bba4b773e8823d3ade40e60cd71c903d71799fe111e8f42f96fc2f8fe0b3a25895a66138b34ed798dce60ae17bf86419264c6d523929850c572541317ac83f9600b0d25be95a14c544ba368f75decf24f31c937457d0ccf970413122b413f073bc54fae6860958700ae74a135320ba34fb269a049842be1c0995eb9e7754068575265e268678120a6e85805b6d50963b652b39c090aed9c664c96888a330a0bda1b0e583dc520a16454e7d8ac9f7bffd91f91935efd0bb6382617fbe00e8fc24d9cf6877e148b5c81358afefe867b1c8817a32a4f74de3a6446a7a80e9cfcbfabe519778c6647ecd57dfb3464cffded7e974bb5a6d3fce85151e15a8d3ebe6c7b729d3542a7e0379ffba63f73cc10f37f7aabc2165a8e356f7cdcef190ef82165cc816cbdfab1cbf25baa8c99a64cfdf58e0704883be84be5ef7dbb9ee608ed009979e9bff677c71bcd6ffba9158d79c12a736dfb1cb9f7fe927013b5609d8d973704e35eb388016f4eea57c1a45e185886265aa84700a693316d34237df1787b49e6b6ae6ce08b4ffb32f08e9a183b1bb7c7c6581568a52178e146d580c53543d42fd5365c96557e6a9a2d173935268ef02a02118570b875ff2f3eb8642490adfb94832189bb9a3354c8cc221cded9f5f8cc0934c65fcb4ba7074c51a50c280272d9404bed6a91b0b42ab59ab7e2c1dbe6ec3365f94", 0x1000}, {&(0x7f00000004c0)="332af26d848791f66b6859b23cc2a802322f7fd43734a557fbd9ecdfc22fce76dfbbeb7e918be141281ce82fb21d215537f1f3ff03d35a6163cfdd03a8b3639663c1fc1d548b14e58e34d68976408d13013be5230577b586588d4bf1816c7f0e42c7ee07a07b9341c91b1f62ee057dbfd033d957e6474a531251601ee0681713247e852fbc9e772cea9b19f95b08e64f3df7", 0x92}, {&(0x7f0000000580)="f93dd421f1a5946bdb60d941e4aad0293883618ed866c0951bcf0d4d1d894c28304670d1b7542331c3d59918cc57e563070ebce9e8272b70c8156eaa05460c4176453079bee174d6b7c23920ea0417275263c5beb2460b5e6f6b3a3bcbe216b08c27ac61ee25b3979c0de473ca4f8a4b3bcecda3f1a08969aa85f210bdf3e92d81188a10a157296d9f450a81f03067d15c0e74bf72ba35958b422726", 0x9c}], 0x7, &(0x7f0000002340)=[{0x1010, 0x113, 0x54e, "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"}], 0x1010}, 0x20000004) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000d, 0x1010, r0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f00000000c0)=@nfc={0x27, 0x0, 0x2, 0x2}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)="98", 0x1}, {&(0x7f0000000340)="5048ebf6fa520430b93788367934270fd8be51d993667eac571c6281f8b646d0ebdd9e12ee27e94ae8f4c4a74fa1dbe0f1ae61c44c4822f7513de469067198e36de8b8349189cb3bd669d22481b476d26a94e6df19f698401f262e463bff2f01417a363dc87e14345ea1ce4a8f7b836a5d998ead665e610505307f53ba9fdb097a18e5d8ad86560c64dc7a", 0x8b}, {&(0x7f0000000400)="2c23cb4124f7da2e1bca37210a3aa0c3be18d625dcd9eecd50eda129eb5924a44bbc70c010f9a8d716716cfc75ba417b342b8a020325ab04abf236e7a2494114a2e168cf2f5772d54e0f00c6102eb6f683a7998e0e4a7ff661bfed8d04d51b94e1d78a181d3b76897aa810100b9362f68d3f762658305893324e9ce070703c5531f06e578c", 0x85}, {&(0x7f00000001c0)="747f1182eeaa2043e4acdb778ed77758df", 0x11}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f00000004c0)="332af26d848791f66b6859b23cc2a802322f7fd43734a557fbd9ecdfc22fce76dfbbeb7e918be141281ce82fb21d215537f1f3ff03d35a6163cfdd03a8b3639663c1fc1d548b14e58e34d68976408d13013be5230577b586588d4bf1816c7f0e42c7ee07a07b9341c91b1f62ee057dbfd033d957e6474a531251601ee0681713247e852fbc9e772cea9b19f95b08e64f3df7", 0x92}, {&(0x7f0000000580)="f93dd421f1a5946bdb60d941e4aad0293883618ed866c0951bcf0d4d1d894c28304670d1b7542331c3d59918cc57e563070ebce9e8272b70c8156eaa05460c4176453079bee174d6b7c23920ea0417275263c5beb2460b5e6f6b3a3bcbe216b08c27ac61ee25b3979c0de473ca4f8a4b3bcecda3f1a08969aa85f210bdf3e92d81188a10a157296d9f450a81f03067d15c0e74bf72ba35958b422726", 0x9c}], 0x7, &(0x7f0000002340)=[{0x1010, 0x113, 0x54e, "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"}], 0x1010}, 0x20000004) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000d, 0x1010, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) [ 489.473505][T17184] input: syz0 as /devices/virtual/input/input2062 [ 489.482914][T17183] input: syz0 as /devices/virtual/input/input2063 18:56:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:13 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 489.637091][T17201] input: syz0 as /devices/virtual/input/input2064 [ 489.680190][T17203] input: syz0 as /devices/virtual/input/input2065 18:56:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:13 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:13 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 489.749962][T17205] input: syz0 as /devices/virtual/input/input2066 [ 489.780758][T17207] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 489.836325][T17210] input: syz0 as /devices/virtual/input/input2067 18:56:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 489.879081][T17214] input: syz0 as /devices/virtual/input/input2068 18:56:13 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:56:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:13 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 490.083031][T17223] input: syz0 as /devices/virtual/input/input2069 [ 490.091401][T17226] input: syz0 as /devices/virtual/input/input2070 [ 490.107027][T17227] input: syz0 as /devices/virtual/input/input2071 18:56:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:14 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) [ 490.338900][T17238] input: syz0 as /devices/virtual/input/input2072 [ 490.339074][T17240] input: syz0 as /devices/virtual/input/input2073 [ 490.379126][T17241] input: syz0 as /devices/virtual/input/input2074 18:56:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 490.425549][T17252] input: syz0 as /devices/virtual/input/input2075 [ 490.514956][T17254] input: syz0 as /devices/virtual/input/input2076 [ 490.548840][T17256] input: syz0 as /devices/virtual/input/input2077 18:56:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:14 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r4 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r4, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r5, 0x688c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r5, 0xad4, 0xdaf4, 0x0, &(0x7f0000000100)={[0x7fff]}, 0x8) syz_io_uring_setup(0x3edf, &(0x7f0000000480), &(0x7f00006d6000/0x3000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_setup(0x4060, &(0x7f0000000340)={0x0, 0x153a, 0x0, 0x3, 0x309, 0x0, r0}, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f00000003c0)) syz_io_uring_submit(r2, r7, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000040)=0x1000, 0x0, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x2, 0x200000ce, r8) syz_io_uring_submit(r6, 0x0, &(0x7f0000000980)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 490.871144][T17267] input: syz0 as /devices/virtual/input/input2078 [ 490.872325][T17258] input: syz0 as /devices/virtual/input/input2079 [ 490.879702][T17261] input: syz0 as /devices/virtual/input/input2080 [ 490.901283][T17264] input: syz0 as /devices/virtual/input/input2081 18:56:14 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r4 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r4, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r5, 0x688c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r5, 0xad4, 0xdaf4, 0x0, &(0x7f0000000100)={[0x7fff]}, 0x8) syz_io_uring_setup(0x3edf, &(0x7f0000000480), &(0x7f00006d6000/0x3000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_setup(0x4060, &(0x7f0000000340)={0x0, 0x153a, 0x0, 0x3, 0x309, 0x0, r0}, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f00000003c0)) syz_io_uring_submit(r2, r7, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000040)=0x1000, 0x0, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x2, 0x200000ce, r8) syz_io_uring_submit(r6, 0x0, &(0x7f0000000980)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r4, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) io_uring_enter(r5, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r5, 0xad4, 0xdaf4, 0x0, &(0x7f0000000100)={[0x7fff]}, 0x8) (async) syz_io_uring_setup(0x3edf, &(0x7f0000000480), &(0x7f00006d6000/0x3000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000200)) (async) syz_io_uring_setup(0x4060, &(0x7f0000000340)={0x0, 0x153a, 0x0, 0x3, 0x309, 0x0, r0}, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f00000003c0)) (async) syz_io_uring_submit(r2, r7, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000040)=0x1000, 0x0, 0x4) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_setup(0x60d, &(0x7f0000000540)) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x2, 0x200000ce, r8) (async) syz_io_uring_submit(r6, 0x0, &(0x7f0000000980)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:56:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:15 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x10000000) r6 = io_uring_setup(0x1692, &(0x7f00000000c0)={0x0, 0x2ac7, 0x0, 0x2000}) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x2, 0x200000ce, r7) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x6) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 491.132358][T17279] input: syz0 as /devices/virtual/input/input2082 [ 491.169255][T17278] input: syz0 as /devices/virtual/input/input2083 [ 491.176800][T17287] input: syz0 as /devices/virtual/input/input2084 18:56:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:15 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r4 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r4, 0x0, 0x0}, 0x0) (async) r5 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r5, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r5, 0xad4, 0xdaf4, 0x0, &(0x7f0000000100)={[0x7fff]}, 0x8) syz_io_uring_setup(0x3edf, &(0x7f0000000480), &(0x7f00006d6000/0x3000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_setup(0x4060, &(0x7f0000000340)={0x0, 0x153a, 0x0, 0x3, 0x309, 0x0, r0}, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f00000003c0)) (async) syz_io_uring_submit(r2, r7, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000040)=0x1000, 0x0, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 32) r9 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x2, 0x200000ce, r8) syz_io_uring_submit(r6, 0x0, &(0x7f0000000980)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 18:56:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 491.407070][T17299] input: syz0 as /devices/virtual/input/input2085 [ 491.414128][T17298] input: syz0 as /devices/virtual/input/input2086 [ 491.439421][T17303] input: syz0 as /devices/virtual/input/input2087 18:56:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:15 executing program 0: r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x400040, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8001) r3 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r3, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r6, r5, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r3, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 491.690179][T17313] input: syz0 as /devices/virtual/input/input2088 [ 491.820319][T17318] input: syz0 as /devices/virtual/input/input2089 18:56:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 492.027258][T17323] input: syz0 as /devices/virtual/input/input2091 18:56:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x0, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:16 executing program 0: r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, 0x0, 0x0) (async, rerun: 32) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x400040, 0x0) (rerun: 32) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8001) (async) r3 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r3, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r6, r5, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r3, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 18:56:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 492.179484][T17329] input: syz0 as /devices/virtual/input/input2094 18:56:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 492.246867][T17340] input: syz0 as /devices/virtual/input/input2095 [ 492.278444][T17343] input: syz0 as /devices/virtual/input/input2096 18:56:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:16 executing program 0: r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x400040, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8001) r3 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r3, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r6, r5, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r3, 0x2a71, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) (async) write$FUSE_BMAP(r0, 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x400040, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1) (async) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8001) (async) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r3, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r6, r5, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r3, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) [ 492.323459][T17346] input: syz0 as /devices/virtual/input/input2097 18:56:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 18:56:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 492.410182][T17348] input: syz0 as /devices/virtual/input/input2098 [ 492.430033][T17352] input: syz0 as /devices/virtual/input/input2099 [ 492.536558][T17363] input: syz0 as /devices/virtual/input/input2100 18:56:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 492.679722][T17365] input: syz0 as /devices/virtual/input/input2101 18:56:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x0, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 18:56:16 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f000042d000/0x1000)=nil, 0x1000, 0x3000004, 0x2010, r0, 0x8000000) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r7 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4007, @fd_index=0x9, 0x1, 0xf6f, 0xebb6, 0x11, 0x0, {0x1}}, 0x81) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:16 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0xf5, 0x3) perf_event_open$cgroup(&(0x7f0000000340)={0x3, 0x80, 0x81, 0x45, 0x3, 0x1, 0x0, 0x3ff, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x7, 0x7}, 0x8400, 0x8001, 0x101, 0x1, 0x2da2ac74, 0x2, 0x7ff, 0x0, 0x2, 0x0, 0x2fa}, r4, 0xc, r3, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r9 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x6000, @fd_index=0x4, 0x3, 0x0, 0x4, 0x5, 0x1, {0x1}}, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 493.121685][T17378] input: syz0 as /devices/virtual/input/input2103 [ 493.123624][T17376] input: syz0 as /devices/virtual/input/input2102 [ 493.134919][T17375] input: syz0 as /devices/virtual/input/input2104 18:56:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:17 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f000042d000/0x1000)=nil, 0x1000, 0x3000004, 0x2010, r0, 0x8000000) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r7 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4007, @fd_index=0x9, 0x1, 0xf6f, 0xebb6, 0x11, 0x0, {0x1}}, 0x81) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f000042d000/0x1000)=nil, 0x1000, 0x3000004, 0x2010, r0, 0x8000000) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) socket$inet6(0xa, 0x806, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r4, r8, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4007, @fd_index=0x9, 0x1, 0xf6f, 0xebb6, 0x11, 0x0, {0x1}}, 0x81) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) [ 493.614479][T17392] input: syz0 as /devices/virtual/input/input2106 18:56:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 493.683637][T17395] input: syz0 as /devices/virtual/input/input2107 [ 493.731011][T17398] input: syz0 as /devices/virtual/input/input2108 18:56:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x0, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 493.777296][T17401] input: syz0 as /devices/virtual/input/input2109 18:56:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [0xffffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 493.854841][T17406] input: syz0 as /devices/virtual/input/input2110 [ 493.877198][T17410] input: syz0 as /devices/virtual/input/input2111 18:56:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:17 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x2000000000000000) [ 493.941369][T17413] input: syz0 as /devices/virtual/input/input2112 18:56:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0xffff8001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 494.095626][T17426] input: syz0 as /devices/virtual/input/input2113 [ 494.175019][T17431] input: syz0 as /devices/virtual/input/input2114 [ 494.236015][T17435] input: syz0 as /devices/virtual/input/input2115 18:56:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 494.463727][T17438] input: syz0 as /devices/virtual/input/input2116 [ 494.551597][T17440] input: syz0 as /devices/virtual/input/input2117 18:56:19 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f000042d000/0x1000)=nil, 0x1000, 0x3000004, 0x2010, r0, 0x8000000) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) r7 = socket$inet6(0xa, 0x806, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000002c40)=@IORING_OP_SENDMSG={0x9, 0xe44820d80051518, 0x0, r7, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x3ee0, &(0x7f0000000240), &(0x7f00006d7000/0x2000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4007, @fd_index=0x9, 0x1, 0xf6f, 0xebb6, 0x11, 0x0, {0x1}}, 0x81) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:19 executing program 4: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x2000000) 18:56:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:19 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x8000000, 0x0, 0x0) [ 495.273123][T17448] input: syz0 as /devices/virtual/input/input2118 [ 495.284648][T17452] input: syz0 as /devices/virtual/input/input2119 18:56:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:19 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x20000, 0x0, 0x0, 0x0) [ 495.646172][T17467] input: syz0 as /devices/virtual/input/input2120 18:56:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 495.698565][T17469] input: syz0 as /devices/virtual/input/input2121 18:56:19 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x41000000, 0x0, 0x0) 18:56:19 executing program 0: r0 = gettid() waitid(0x2, r0, 0x0, 0x4, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x3, 0x50, 0x292, 0x4, 0x4, 0x7, 0x656e, 0x101, 0x7}, 0x0) r1 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r3, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r1, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:19 executing program 4: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x41, 0x0, 0x0, 0x0) 18:56:20 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0xf000000, 0x0, 0x0) [ 496.095004][T17479] input: syz0 as /devices/virtual/input/input2122 [ 496.118241][T17480] input: syz0 as /devices/virtual/input/input2123 18:56:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:20 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x8, 0x0, 0x0, 0x0) [ 496.399745][T17494] input: syz0 as /devices/virtual/input/input2124 [ 496.434658][T17496] input: syz0 as /devices/virtual/input/input2125 18:56:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 496.822401][T17503] input: syz0 as /devices/virtual/input/input2126 18:56:20 executing program 0: r0 = gettid() waitid(0x2, r0, 0x0, 0x4, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x3, 0x50, 0x292, 0x4, 0x4, 0x7, 0x656e, 0x101, 0x7}, 0x0) r1 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r3, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r1, 0x2a71, 0x0, 0x0, 0x0, 0x0) gettid() (async) waitid(0x2, r0, 0x0, 0x4, 0x0) (async) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x3, 0x50, 0x292, 0x4, 0x4, 0x7, 0x656e, 0x101, 0x7}, 0x0) (async) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r1, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_submit(r4, r3, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) io_uring_enter(r1, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async) 18:56:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:20 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x8, 0x0, 0x0, 0x0) 18:56:20 executing program 4: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x41, 0x0, 0x0, 0x0) 18:56:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 497.077106][T17508] input: syz0 as /devices/virtual/input/input2127 [ 497.088957][T17512] input: syz0 as /devices/virtual/input/input2128 18:56:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 497.346232][T17529] input: syz0 as /devices/virtual/input/input2129 18:56:21 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x8, 0x0, 0x0, 0x0) 18:56:21 executing program 4: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x41, 0x0, 0x0, 0x0) 18:56:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 497.441025][T17533] input: syz0 as /devices/virtual/input/input2130 18:56:22 executing program 0: r0 = gettid() waitid(0x2, r0, 0x0, 0x4, 0x0) (async, rerun: 32) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x3, 0x50, 0x292, 0x4, 0x4, 0x7, 0x656e, 0x101, 0x7}, 0x0) (async, rerun: 32) r1 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r1, 0x0) (async, rerun: 32) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r3, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) io_uring_enter(r1, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 1) 18:56:22 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_enter(r0, 0x2a71, 0x8, 0x0, 0x0, 0x0) [ 498.550882][T17544] input: syz0 as /devices/virtual/input/input2131 [ 498.572725][T17545] input: syz0 as /devices/virtual/input/input2132 [ 498.601937][T17550] FAULT_INJECTION: forcing a failure. [ 498.601937][T17550] name failslab, interval 1, probability 0, space 0, times 0 [ 498.619247][T17549] input: syz0 as /devices/virtual/input/input2133 [ 498.655837][T17550] CPU: 1 PID: 17550 Comm: syz-executor.4 Not tainted 5.16.0-rc5-syzkaller #0 [ 498.664652][T17550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.674717][T17550] Call Trace: [ 498.678005][T17550] [ 498.680946][T17550] dump_stack_lvl+0x201/0x2d8 [ 498.685645][T17550] ? show_regs_print_info+0x12/0x12 [ 498.690871][T17550] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 498.696611][T17550] ? __might_sleep+0xe0/0xe0 [ 498.701216][T17550] ? rcu_read_lock_sched_held+0x89/0x130 [ 498.706874][T17550] should_fail+0x384/0x4b0 [ 498.711313][T17550] ? tomoyo_realpath_from_path+0xd8/0x610 [ 498.717116][T17550] should_failslab+0x5/0x20 [ 498.721630][T17550] __kmalloc+0x94/0x380 [ 498.725796][T17550] ? kfree+0x2f/0x330 [ 498.729801][T17550] tomoyo_realpath_from_path+0xd8/0x610 [ 498.735387][T17550] tomoyo_path_number_perm+0x219/0x7c0 [ 498.740875][T17550] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 498.746422][T17550] security_file_ioctl+0x55/0xb0 [ 498.751375][T17550] __se_sys_ioctl+0x48/0x170 [ 498.755982][T17550] do_syscall_64+0x44/0xd0 [ 498.760675][T17550] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 498.766579][T17550] RIP: 0033:0x7ff1d4c23e99 [ 498.771005][T17550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 498.790622][T17550] RSP: 002b:00007ff1d3578168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:56:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 498.799051][T17550] RAX: ffffffffffffffda RBX: 00007ff1d4d37030 RCX: 00007ff1d4c23e99 [ 498.807036][T17550] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 498.815014][T17550] RBP: 00007ff1d35781d0 R08: 0000000000000000 R09: 0000000000000000 [ 498.823143][T17550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.831128][T17550] R13: 00007ffc0a6c2aff R14: 00007ff1d3578300 R15: 0000000000022000 [ 498.839130][T17550] 18:56:22 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_enter(r0, 0x2a71, 0x8, 0x0, 0x0, 0x0) 18:56:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 498.936859][T17550] ERROR: Out of memory at tomoyo_realpath_from_path. 18:56:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:23 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x2010, 0xffffffffffffffff, 0x8000000) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x404200, 0x0) r7 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x2, 0x200000ce, r8) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r6, 0x0, &(0x7f00000000c0)="cbf8b70ae38550f468f6b33c7289da157866f41a633f2fb057e8f10150fbd8f1c3a5e9dcc6ff94e88e2932ce76c0ea1dfc08d3545db1", 0x36, 0x800, 0x0, {0x0, r8}}, 0x5) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 2) [ 499.172360][T17566] input: syz0 as /devices/virtual/input/input2134 [ 499.262206][T17570] input: syz0 as /devices/virtual/input/input2135 18:56:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:23 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_enter(r0, 0x2a71, 0x8, 0x0, 0x0, 0x0) [ 499.303222][T17576] input: syz0 as /devices/virtual/input/input2136 18:56:23 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x2010, 0xffffffffffffffff, 0x8000000) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x404200, 0x0) (async, rerun: 32) r7 = io_uring_setup(0x3b81, &(0x7f00000000c0)) (rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async, rerun: 32) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async, rerun: 32) r9 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x2, 0x200000ce, r8) (async) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r6, 0x0, &(0x7f00000000c0)="cbf8b70ae38550f468f6b33c7289da157866f41a633f2fb057e8f10150fbd8f1c3a5e9dcc6ff94e88e2932ce76c0ea1dfc08d3545db1", 0x36, 0x800, 0x0, {0x0, r8}}, 0x5) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 499.353876][T17578] input: syz0 as /devices/virtual/input/input2137 [ 499.362807][T17576] FAULT_INJECTION: forcing a failure. [ 499.362807][T17576] name failslab, interval 1, probability 0, space 0, times 0 [ 499.421863][T17576] CPU: 1 PID: 17576 Comm: syz-executor.4 Not tainted 5.16.0-rc5-syzkaller #0 [ 499.430678][T17576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.440744][T17576] Call Trace: [ 499.444032][T17576] [ 499.446975][T17576] dump_stack_lvl+0x201/0x2d8 [ 499.450928][T17585] input: syz0 as /devices/virtual/input/input2138 [ 499.451669][T17576] ? show_regs_print_info+0x12/0x12 [ 499.463272][T17576] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 499.469105][T17576] ? __might_sleep+0xe0/0xe0 [ 499.474081][T17576] should_fail+0x384/0x4b0 [ 499.478515][T17576] ? tomoyo_encode2+0x25a/0x560 [ 499.483380][T17576] should_failslab+0x5/0x20 [ 499.487891][T17576] __kmalloc+0x94/0x380 [ 499.492055][T17576] ? prepend_path+0xb70/0xb70 [ 499.496850][T17576] tomoyo_encode2+0x25a/0x560 [ 499.501546][T17576] tomoyo_realpath_from_path+0x5c3/0x610 [ 499.507201][T17576] tomoyo_path_number_perm+0x219/0x7c0 [ 499.512708][T17576] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 499.518230][T17576] security_file_ioctl+0x55/0xb0 [ 499.523184][T17576] __se_sys_ioctl+0x48/0x170 [ 499.527784][T17576] do_syscall_64+0x44/0xd0 [ 499.532212][T17576] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 499.538195][T17576] RIP: 0033:0x7ff1d4c23e99 [ 499.542610][T17576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 499.562367][T17576] RSP: 002b:00007ff1d3599168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:56:23 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x8, 0x0, 0x0, 0x0) [ 499.570788][T17576] RAX: ffffffffffffffda RBX: 00007ff1d4d36f60 RCX: 00007ff1d4c23e99 [ 499.578759][T17576] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 499.586732][T17576] RBP: 00007ff1d35991d0 R08: 0000000000000000 R09: 0000000000000000 [ 499.594694][T17576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.602653][T17576] R13: 00007ffc0a6c2aff R14: 00007ff1d3599300 R15: 0000000000022000 [ 499.610631][T17576] 18:56:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 499.756081][T17594] input: syz0 as /devices/virtual/input/input2139 [ 499.791789][T17595] input: syz0 as /devices/virtual/input/input2140 18:56:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:23 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x8, 0x0, 0x0, 0x0) [ 499.878032][T17576] ERROR: Out of memory at tomoyo_realpath_from_path. [ 499.906898][T17597] input: syz0 as /devices/virtual/input/input2141 18:56:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 500.122525][T17601] input: syz0 as /devices/virtual/input/input2142 18:56:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 3) 18:56:24 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x40002043}, 0x0) (async) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x2010, 0xffffffffffffffff, 0x8000000) (async) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x404200, 0x0) (async) r7 = io_uring_setup(0x3b81, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = io_uring_setup(0x60d, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x2, 0x200000ce, r8) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r6, 0x0, &(0x7f00000000c0)="cbf8b70ae38550f468f6b33c7289da157866f41a633f2fb057e8f10150fbd8f1c3a5e9dcc6ff94e88e2932ce76c0ea1dfc08d3545db1", 0x36, 0x800, 0x0, {0x0, r8}}, 0x5) (async) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:24 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x8, 0x0, 0x0, 0x0) 18:56:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:24 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x8, 0x0, 0x0, 0x0) [ 500.300847][T17609] input: syz0 as /devices/virtual/input/input2144 [ 500.312232][T17614] input: syz0 as /devices/virtual/input/input2143 18:56:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:24 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1d3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x5227, &(0x7f00000000c0)={0x0, 0x8809, 0x2, 0x1, 0x2e5, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000042c000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000180)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x200) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 18:56:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 500.486273][T17627] input: syz0 as /devices/virtual/input/input2145 [ 500.542425][T17629] input: syz0 as /devices/virtual/input/input2146 18:56:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:56:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:56:24 executing program 1: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a71, 0x8, 0x0, 0x0, 0x0) 18:56:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 500.879480][T17643] input: syz0 as /devices/virtual/input/input2147 [ 500.893296][T17640] input: syz0 as /devices/virtual/input/input2148 18:56:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) [ 500.949469][T17646] input: syz0 as /devices/virtual/input/input2149 18:56:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000]}, 0x45c) 18:56:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x30, 0x0, "ec0957a461e7bb8dbc69694862bc7b7859b007b21d865be012028b26021e40615989cfc5973638f9c4e5668ad9548390f408a9d486227471a4f7e214db3e433ddef6bb8b54b2926e128c861d12e8265a"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 501.128953][T17653] input: syz0 as /devices/virtual/input/input2151 [ 501.135920][T17654] input: syz0 as /devices/virtual/input/input2150 [ 501.219073][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.225406][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.659529][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.665848][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.098735][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.105060][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 658.008122][ T27] INFO: task syz-executor.0:17630 blocked for more than 143 seconds. [ 658.016253][ T27] Not tainted 5.16.0-rc5-syzkaller #0 [ 658.038087][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 658.046885][ T27] task:syz-executor.0 state:D stack:26864 pid:17630 ppid: 3627 flags:0x00004004 [ 658.060246][ T27] Call Trace: [ 658.063571][ T27] [ 658.066517][ T27] __schedule+0xb72/0x1460 [ 658.072874][ T27] ? release_firmware_map_entry+0x182/0x182 [ 658.086581][ T27] ? __mutex_trylock_common+0xb3/0x300 [ 658.108515][ T27] ? do_raw_spin_unlock+0x134/0x8a0 [ 658.113775][ T27] schedule+0x12b/0x1f0 [ 658.123559][ T27] schedule_preempt_disabled+0xf/0x20 [ 658.135445][ T27] __mutex_lock_common+0xd1f/0x2590 [ 658.144436][ T27] ? io_ring_ctx_wait_and_kill+0xa0/0x36a [ 658.153884][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 658.163420][ T27] mutex_lock_nested+0x1a/0x20 [ 658.171819][ T27] io_ring_ctx_wait_and_kill+0xa0/0x36a [ 658.177402][ T27] ? io_uring_show_fdinfo+0x6c/0x6c [ 658.192976][ T27] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 658.202524][ T27] ? io_uring_mmap+0x33b/0x33b [ 658.207402][ T27] io_uring_release+0x59/0x63 [ 658.215336][ T27] __fput+0x3fc/0x870 [ 658.221593][ T27] task_work_run+0x146/0x1c0 [ 658.231613][ T27] exit_to_user_mode_prepare+0x209/0x220 [ 658.237352][ T27] ? trace_irq_disable_rcuidle+0x11/0x170 [ 658.245221][ T27] syscall_exit_to_user_mode+0x2e/0x70 [ 658.253305][ T27] do_syscall_64+0x53/0xd0 [ 658.257824][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 658.264352][ T27] RIP: 0033:0x7f1bed4a9adb [ 658.275408][ T27] RSP: 002b:00007ffea3aa97f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 658.287780][ T27] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f1bed4a9adb [ 658.295788][ T27] RDX: 0000001b2e220000 RSI: 0000001b2e223038 RDI: 0000000000000003 [ 658.304064][ T27] RBP: 00007f1bed60b960 R08: 0000000000000000 R09: 000000006ecbfdf7 [ 658.322432][ T27] R10: 00007ffea3b3d0b8 R11: 0000000000000293 R12: 000000000007a652 [ 658.334159][ T27] R13: 00007ffea3aa98f0 R14: 00007ffea3aa9910 R15: 0000000000000032 [ 658.346326][ T27] [ 658.353616][ T27] INFO: task syz-executor.0:17632 blocked for more than 143 seconds. [ 658.365188][ T27] Not tainted 5.16.0-rc5-syzkaller #0 [ 658.372609][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 658.381544][ T27] task:syz-executor.0 state:D stack:24304 pid:17632 ppid: 3627 flags:0x00004004 [ 658.391025][ T27] Call Trace: [ 658.394323][ T27] [ 658.397267][ T27] __schedule+0xb72/0x1460 [ 658.402486][ T27] ? release_firmware_map_entry+0x182/0x182 [ 658.408571][ T27] ? __mutex_trylock_common+0xb3/0x300 [ 658.414057][ T27] ? do_raw_spin_unlock+0x134/0x8a0 [ 658.419590][ T27] schedule+0x12b/0x1f0 [ 658.423972][ T27] schedule_preempt_disabled+0xf/0x20 [ 658.429493][ T27] __mutex_lock_common+0xd1f/0x2590 [ 658.434734][ T27] ? io_uring_del_tctx_node+0xe4/0x2a9 [ 658.440355][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 658.445607][ T27] ? xa_clear_mark+0x1c0/0x1c0 [ 658.450592][ T27] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 658.456681][ T27] mutex_lock_nested+0x1a/0x20 [ 658.461828][ T27] io_uring_del_tctx_node+0xe4/0x2a9 [ 658.467151][ T27] io_uring_clean_tctx+0x192/0x1d5 [ 658.480041][ T27] ? io_run_task_work+0x13d/0x13d [ 658.485120][ T27] io_uring_cancel_generic+0x629/0x671 [ 658.494831][ T27] ? __io_uring_cancel+0xf/0xf [ 658.503244][ T27] ? coredump_task_exit+0x1f6/0x580 [ 658.512170][ T27] ? init_wait_entry+0xd0/0xd0 [ 658.517021][ T27] ? _raw_spin_unlock+0x40/0x40 [ 658.525388][ T27] ? do_exit+0x24f0/0x24f0 [ 658.530791][ T27] do_exit+0x281/0x24f0 [ 658.534978][ T27] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 658.547445][ T27] ? print_irqtrace_events+0x220/0x220 [ 658.554071][ T27] ? mm_update_next_owner+0x6d0/0x6d0 [ 658.563818][ T27] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 658.574521][ T27] ? lockdep_hardirqs_on+0x95/0x140 [ 658.583310][ T27] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 658.594707][ T27] do_group_exit+0x168/0x2d0 [ 658.603246][ T27] get_signal+0x1740/0x2120 [ 658.611985][ T27] ? ptrace_notify+0x340/0x340 [ 658.616764][ T27] ? do_futex+0x334/0x560 [ 658.625154][ T27] arch_do_signal_or_restart+0x9c/0x730 [ 658.631044][ T27] ? get_sigframe_size+0x10/0x10 [ 658.635999][ T27] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 658.642247][ T27] ? exit_to_user_mode_prepare+0x12e/0x220 [ 658.651427][ T27] exit_to_user_mode_prepare+0x191/0x220 [ 658.657084][ T27] ? trace_irq_disable_rcuidle+0x11/0x170 [ 658.663079][ T27] syscall_exit_to_user_mode+0x2e/0x70 [ 658.669459][ T27] do_syscall_64+0x53/0xd0 [ 658.674508][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 658.681429][ T27] RIP: 0033:0x7f1bed4f6e99 [ 658.685855][ T27] RSP: 002b:00007f1bebe6c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 658.694560][ T27] RAX: fffffffffffffe00 RBX: 00007f1bed609f68 RCX: 00007f1bed4f6e99 [ 658.702744][ T27] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1bed609f68 [ 658.710941][ T27] RBP: 00007f1bed609f60 R08: 0000000000000000 R09: 0000000000000000 [ 658.719309][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1bed609f6c [ 658.727287][ T27] R13: 00007ffea3aa978f R14: 00007f1bebe6c300 R15: 0000000000022000 [ 658.735854][ T27] [ 658.739128][ T27] [ 658.739128][ T27] Showing all locks held in the system: [ 658.746895][ T27] 1 lock held by khungtaskd/27: [ 658.752049][ T27] #0: ffffffff8cb1de40 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 658.764488][ T27] 2 locks held by getty/3280: [ 658.769387][ T27] #0: ffff88814ae2f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 658.780998][ T27] #1: ffffc90002ba32e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6c5/0x1c60 [ 658.791472][ T27] 2 locks held by kworker/u4:17/4814: [ 658.797009][ T27] #0: ffff8880b9a395d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x110 [ 658.807224][ T27] #1: ffff8880b9a27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x46c/0x780 [ 658.819738][ T27] 1 lock held by syz-executor.0/17630: [ 658.825211][ T27] #0: ffff888031ac20a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_ring_ctx_wait_and_kill+0xa0/0x36a [ 658.836048][ T27] 1 lock held by syz-executor.0/17632: [ 658.841698][ T27] #0: ffff888031ac20a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_uring_del_tctx_node+0xe4/0x2a9 [ 658.852229][ T27] 1 lock held by syz-executor.0/17635: [ 658.857869][ T27] #0: ffff888031ac20a8 (&ctx->uring_lock){+.+.}-{3:3}, at: tctx_task_work+0x2e5/0x560 [ 658.867781][ T27] [ 658.870111][ T27] ============================================= [ 658.870111][ T27] [ 658.882296][ T27] NMI backtrace for cpu 1 [ 658.886643][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.16.0-rc5-syzkaller #0 [ 658.894794][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.904867][ T27] Call Trace: [ 658.908137][ T27] [ 658.911057][ T27] dump_stack_lvl+0x1dc/0x2d8 [ 658.915730][ T27] ? show_regs_print_info+0x12/0x12 [ 658.921179][ T27] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 658.926985][ T27] nmi_cpu_backtrace+0x45f/0x490 [ 658.931913][ T27] ? wake_up_klogd+0xbb/0xf0 [ 658.936495][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 658.942634][ T27] ? _printk+0xcf/0x118 [ 658.946777][ T27] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 658.952484][ T27] ? wake_up_klogd+0xb2/0xf0 [ 658.957060][ T27] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 658.962770][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 658.968887][ T27] nmi_trigger_cpumask_backtrace+0x16a/0x280 [ 658.974856][ T27] watchdog+0xc82/0xcd0 [ 658.979056][ T27] kthread+0x468/0x490 [ 658.983124][ T27] ? hungtask_pm_notify+0x50/0x50 [ 658.988134][ T27] ? kthread_blkcg+0xd0/0xd0 [ 658.992713][ T27] ret_from_fork+0x1f/0x30 [ 658.997172][ T27] [ 659.001125][ T27] Sending NMI from CPU 1 to CPUs 0: [ 659.006341][ C0] NMI backtrace for cpu 0 [ 659.006351][ C0] CPU: 0 PID: 4814 Comm: kworker/u4:17 Not tainted 5.16.0-rc5-syzkaller #0 [ 659.006366][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 659.006374][ C0] Workqueue: bat_events batadv_nc_worker [ 659.006472][ C0] RIP: 0010:check_preemption_disabled+0xa/0x1c0 [ 659.006490][ C0] Code: 0f 1f 44 00 00 48 c7 c7 60 4b d5 8a 48 c7 c6 a0 4b d5 8a eb 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 41 57 41 56 41 55 41 54 53 <48> 83 ec 10 49 89 f6 49 89 ff 65 48 8b 04 25 28 00 00 00 48 89 44 [ 659.006500][ C0] RSP: 0018:ffffc90003bef9e8 EFLAGS: 00000082 [ 659.006511][ C0] RAX: 0000000000000001 RBX: ffffc90003befaa0 RCX: ffff88801c5c8a58 [ 659.006521][ C0] RDX: 0000000000000000 RSI: ffffffff8a6f1840 RDI: ffffffff8ad54be0 [ 659.006529][ C0] RBP: ffffc90003befb70 R08: dffffc0000000000 R09: fffffbfff1ff39dd [ 659.006539][ C0] R10: fffffbfff1ff39dd R11: 0000000000000000 R12: 0000000000000246 [ 659.006548][ C0] R13: 1ffff9200077df4c R14: 0000000000000000 R15: dffffc0000000000 [ 659.006557][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 659.006568][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 659.006577][ C0] CR2: 00007f56ec3bd990 CR3: 0000000022fa4000 CR4: 00000000003526f0 [ 659.006590][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 659.006597][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 659.006605][ C0] Call Trace: [ 659.006610][ C0] [ 659.006616][ C0] lock_acquire+0x1af/0x4d0 [ 659.006633][ C0] ? read_lock_is_recursive+0x10/0x10 [ 659.006646][ C0] ? rcu_lock_release+0x5/0x20 [ 659.006659][ C0] ? __lock_acquire+0x2b00/0x2b00 [ 659.006671][ C0] ? batadv_nc_purge_paths+0x35f/0x3f0 [ 659.006687][ C0] ? batadv_nc_purge_paths+0xe0/0x3f0 [ 659.006701][ C0] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 659.006717][ C0] ? batadv_nc_process_nc_paths+0x360/0x360 [ 659.006731][ C0] rcu_lock_acquire+0x2a/0x30 [ 659.006745][ C0] ? rcu_lock_acquire+0x5/0x30 [ 659.006758][ C0] batadv_nc_process_nc_paths+0xc6/0x360 [ 659.006775][ C0] batadv_nc_worker+0x3de/0x5b0 [ 659.006791][ C0] process_one_work+0x853/0x1140 [ 659.006816][ C0] ? worker_detach_from_pool+0x260/0x260 [ 659.006831][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 659.006844][ C0] ? kthread_data+0x4d/0xc0 [ 659.006856][ C0] ? wq_worker_running+0x8b/0x140 [ 659.006869][ C0] worker_thread+0xac1/0x1320 [ 659.006891][ C0] kthread+0x468/0x490 [ 659.006902][ C0] ? rcu_lock_release+0x20/0x20 [ 659.006914][ C0] ? kthread_blkcg+0xd0/0xd0 [ 659.006927][ C0] ret_from_fork+0x1f/0x30 [ 659.006947][ C0] [ 659.011684][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 659.273636][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.16.0-rc5-syzkaller #0 [ 659.281777][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 659.291817][ T27] Call Trace: [ 659.295085][ T27] [ 659.298006][ T27] dump_stack_lvl+0x1dc/0x2d8 [ 659.302679][ T27] ? show_regs_print_info+0x12/0x12 [ 659.307865][ T27] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 659.313581][ T27] panic+0x2d6/0x810 [ 659.317464][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 659.323087][ T27] ? nmi_trigger_cpumask_backtrace+0x206/0x280 [ 659.329233][ T27] ? nmi_panic+0x90/0x90 [ 659.333464][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 659.339522][ T27] ? nmi_trigger_cpumask_backtrace+0x206/0x280 [ 659.345658][ T27] ? nmi_trigger_cpumask_backtrace+0x266/0x280 [ 659.351801][ T27] watchdog+0xcc2/0xcd0 [ 659.355953][ T27] kthread+0x468/0x490 [ 659.360007][ T27] ? hungtask_pm_notify+0x50/0x50 [ 659.365018][ T27] ? kthread_blkcg+0xd0/0xd0 [ 659.369615][ T27] ret_from_fork+0x1f/0x30 [ 659.374032][ T27] [ 659.377301][ T27] Kernel Offset: disabled [ 659.381623][ T27] Rebooting in 86400 seconds..