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", 0x1000, 0x100000001}, {&(0x7f0000001880)="b8ac782cd5b5b8c8bca00602ff5d245e5f558503a7531114a713504a4f2ea31b01adde4d560a7fbcf479cc1864c0991a332d502140ad0520904eda7ce35922ef0f6b642e97d4348eb556557a098265ca7a46909be3277a4a26d4e8f629d6b4147068ed414f0b6e4aacf29d648605c3af8a4e745a6625aa1c25b18a16bd49f7587dbc8bebcc97439a3a677236c06e2fa03c7cb5ac452c5004bcbc52b178b44fcec9154466421d9e8385d7cf22a7340c3632b6733567d3f548fc519d06b4a8c16ad5a386e9a9eacda5261ad91e53b87808df717b8d4ae041dcac9521985375759d0f91ec6b3a8976846af9a213", 0xec, 0x8}], 0x800000, &(0x7f0000001980)=ANY=[@ANYBLOB="66617374626f6f742c6e6f696e6c696e655f646174612c696e6c696e655f78617474722c68656170ec4a35953dc79364613d2c646973636172642c746573745f64756d6d795f656e6372797074696f6e2c6772706a71756f74613d666f75002c6e6f646973636172642c806e6c655f78617474725f73697a653d307830303030303030313030308ecf30b8d62c66736d616769633d3078666666666666666666666666666666662c7065726d69745f646995656374696f246f626a5f747970653d6e65742f74637036002c7375626a5f757365723d2d282c000000"]) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470d949948cf4f0041788505000000deb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcc7081186dfc355d252f2b0bd0e087391a5ec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e1772022f4ef7b7d5daad79e49803e6449d3a53cca11def2655f60344562dc39325a7d85a65370b6a8e2496734702b"], 0xa2}}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000001b40)={0x0, @bt={0x8, 0x679, 0x1, 0x2, 0x400, 0x7, 0xffff, 0x1, 0x6, 0x400, 0x4, 0x5, 0x3, 0x0, 0x1a, 0x10}}) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) [ 1008.908003] input: syz0 as /devices/virtual/input/input173 20:48:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x101000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000280)=0xfffffffffffffff8, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xffaf) mq_timedreceive(r2, &(0x7f0000000000)=""/23, 0x17, 0x10001, &(0x7f0000000100)={0x77359400}) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000140)=r2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x2000000000004, @multicast1}, 0xffffffffffffffad) splice(r2, 0x0, r4, 0x0, 0x810005, 0x0) [ 1009.035469] input: syz0 as /devices/virtual/input/input174 20:48:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30001200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0xc0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffaf) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x810005, 0x0) 20:48:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) [ 1009.250378] input: syz0 as /devices/virtual/input/input175 20:48:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1009.351907] input: syz0 as /devices/virtual/input/input176 20:48:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000780)={'syzkaller1\x00', 0x4}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000800)={0xffffffffffffffff}, 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000880)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000007c0)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00/\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1009.590293] input: syz0 as /devices/virtual/input/input177 [ 1009.625617] input: syz0 as /devices/virtual/input/input178 20:48:02 executing program 5: mknod(&(0x7f0000000ac0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 20:48:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffaf) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x810005, 0x0) 20:48:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x17, 0x4}, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f00000000c0)) dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) finit_module(r2, &(0x7f0000000100)='net/tcp6\x00', 0x1) 20:48:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000000000001200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000780)={0x80, 0x1}, 0x2) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) [ 1009.838386] input: syz0 as /devices/virtual/input/input179 [ 1009.895519] input: syz0 as /devices/virtual/input/input180 20:48:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000000500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) syz_open_procfs(r4, &(0x7f0000000140)='net/sco\x00') write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffaf) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000180)) splice(r1, 0x0, r3, 0x0, 0x810005, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 20:48:03 executing program 5: [ 1010.121761] input: syz0 as /devices/virtual/input/input181 20:48:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000510100000000000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1f011e772e36fd1a4fe501b36292ae78"], 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000780)=""/49) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f00000007c0)={0x6, 0x7, 0x604, 0x9, 0x75250352, 0x3, 0xffffffffffffff55}) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) [ 1010.212206] input: syz0 as /devices/virtual/input/input182 20:48:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x1d2) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xffaf) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x810005, 0x0) 20:48:03 executing program 5: 20:48:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000001400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:03 executing program 5: [ 1010.461590] input: syz0 as /devices/virtual/input/input183 [ 1010.526609] input: syz0 as /devices/virtual/input/input184 20:48:05 executing program 5: 20:48:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffaf) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x5) splice(r1, 0x0, r3, 0x0, 0x810005, 0x0) 20:48:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000300", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x2, 0x4, 0x48f, 0x3ff, 0x2, 0x2, 0x1ff, 0x9, 0x7, 0x0, 0x6c4f, 0x100000000, 0x0, 0x5a81, 0x3ff, 0xb0}}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000100)={0x6, 0x102, 0x4, {0x7ff, 0xfffffffffffffff8, 0x63b1, 0x80000000}}) getsockname$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tee(r1, r4, 0x0, 0x5) tkill(r2, 0x1004000000016) 20:48:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r3], 0x12) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x80000008001) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95363e942c1c66adce6a5b74f1a1d7ddefcadb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062a7544a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:05 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r5, 0xffffffffffffff7f) io_submit(r4, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r6, 0x81f4}, 0x4a9) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYPTR, @ANYRES32=r1, @ANYPTR=&(0x7f0000000980)=ANY=[@ANYRES64=r6, @ANYRESDEC=r1, @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYPTR64, @ANYPTR64, @ANYRESDEC=0x0, @ANYPTR, @ANYRES64=r1, @ANYPTR64, @ANYRES16=r1], @ANYRESDEC=r6, @ANYRES32=r6, @ANYRESOCT=r7, @ANYRESOCT=r0], @ANYRES32=r2, @ANYRESHEX=r2], 0x5}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r8, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r9 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r10, 0x1) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:05 executing program 5: [ 1012.915142] input: syz0 as /devices/virtual/input/input185 20:48:06 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffaf) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x810005, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000000)={0x8}) [ 1012.986237] input: syz0 as /devices/virtual/input/input186 20:48:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x3d) 20:48:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000000000000100", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:06 executing program 5: 20:48:06 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}, {0x0, 0x7530}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffaf) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x810005, 0x0) 20:48:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) write$uinput_user_dev(r3, &(0x7f0000000780)={'syz0\x00', {0x7fff, 0x693, 0xc7, 0x9}, 0x26, [0xfffffffffffffffe, 0x200, 0x10000, 0x0, 0x8, 0xfffffffffffffffb, 0x7ff, 0xfffffffffffffeff, 0xc222, 0x4, 0x3ff, 0x0, 0x0, 0x100000000, 0x7ff, 0x6, 0x8, 0x2, 0x64, 0xfffffffffffffffc, 0x3, 0x6, 0x0, 0x2, 0x81, 0x7f, 0xdd9b, 0x14, 0x34a, 0x2, 0x9, 0x2, 0x6000000000000000, 0x1, 0xfffffffffffffff9, 0xfd, 0x9, 0x8000000000000000, 0x2, 0xfff, 0x4, 0xffffffffffffffff, 0x5, 0x1, 0xbd, 0xbd, 0x101, 0xad, 0x10000, 0x7, 0x100000000, 0x80000000, 0x10000, 0x4, 0x4, 0x10000, 0x9, 0x80, 0xfffffffffffffed3, 0x8, 0x1, 0x9, 0x8001, 0x401], [0x6, 0x9, 0x0, 0x400, 0x4, 0x7f, 0x0, 0x3ff, 0x77, 0x6, 0x9000000000, 0x1, 0xfff, 0xfffffffffffffffc, 0x1e, 0x4, 0x7fffffff, 0x10001, 0x80, 0x32, 0x9, 0x8, 0x100000001, 0x0, 0x17cf, 0x8, 0xffffffffffffffff, 0x2, 0x936, 0x6, 0x10001, 0x7, 0x1, 0x1, 0x4, 0x100, 0x7fffffff, 0x1ff, 0x3, 0xfffffffffffffff7, 0x6, 0xfffffffffffffffa, 0xfffffffffffffffd, 0x0, 0x6, 0x7fff, 0x0, 0x6, 0x2, 0x317a, 0x0, 0x1ff, 0x100, 0x3, 0x3, 0xb5e9, 0x5, 0x6b8, 0x101, 0x3, 0x9, 0xfff, 0x3, 0xffffffffffffa97b], [0x8ba1, 0x81, 0x5c, 0x3d69, 0x7, 0x55, 0x4, 0x4, 0x4, 0x7ff, 0x100000001, 0xfff, 0x4, 0xfa, 0x400, 0xffffffff00000000, 0x6, 0x4, 0x100000000, 0x0, 0x8, 0x101, 0x80000001, 0xc48, 0xd11, 0xff, 0xffffffffffffff60, 0xce, 0x8be, 0x9, 0x7ff, 0x404, 0x4, 0x441, 0x6113, 0xe6c, 0x7fff, 0x3, 0xffffffffffffffff, 0xffffffffffffff01, 0x3, 0x4, 0x8000, 0x1, 0x0, 0x2000000000000, 0x4, 0x2803, 0x48, 0x6, 0x7, 0x6, 0x100000001, 0x101, 0x0, 0x1, 0x6, 0xfffffffffffffff7, 0x2, 0x8, 0x100000000, 0x2b, 0x3, 0x80000001], [0x6fcb07af, 0x6, 0x2, 0x9, 0x6, 0x1, 0x40, 0xfffffffffffffff7, 0x20, 0x2, 0x2, 0x2, 0xfff, 0x7f, 0x7, 0x9, 0x0, 0x9, 0x4, 0x5, 0x9, 0xbc2e, 0x80000001, 0x200, 0xa44, 0x7, 0xfffffffffffffffb, 0xfffffffffffffff7, 0xffff, 0x3ff, 0xb5, 0x6, 0x5, 0x0, 0x6, 0x100000000, 0x6, 0xb6, 0x100000001, 0x2, 0xfff, 0x7, 0xf4e, 0x0, 0x5, 0x5, 0x8, 0xbc, 0x800, 0x7, 0x7fff, 0x1, 0x8000, 0x9, 0xb657, 0x5, 0x2, 0x1ff, 0x1, 0x100, 0x3, 0xff, 0x7fffffff, 0xff]}, 0x45c) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:06 executing program 5: [ 1013.315773] input: syz0 as /devices/virtual/input/input187 20:48:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r3, &(0x7f0000000080)=0x142, 0x9168) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r4, r0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r2, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1004000000016) fstat(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) r8 = geteuid() getresgid(&(0x7f0000000540), &(0x7f0000000580)=0x0, &(0x7f00000005c0)) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@loopback, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000800)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000900)=0xe8) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000b00)=0xe8) stat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = geteuid() r19 = getegid() getresuid(&(0x7f00000023c0)=0x0, &(0x7f0000002400), &(0x7f0000002440)) getgroups(0x2, &(0x7f0000002480)=[0xffffffffffffffff, 0xee01]) stat(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002980)='./file0\x00', &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r25 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002c80)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000002d80)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002dc0)={0x0, 0x0, 0x0}, &(0x7f0000002e00)=0xc) stat(&(0x7f00000041c0)='./file0\x00', &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000004280), &(0x7f00000042c0), &(0x7f0000004300)=0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000004340)={0x401, 0x6, 0x4, 0x1010800, {0x0, 0x2710}, {0x3, 0xc, 0x3f, 0xfffffffffffffff9, 0x8001, 0x24, "bb5135b3"}, 0x5, 0x4, @fd=0xffffffffffffffff, 0x4}) r31 = getuid() stat(&(0x7f00000057c0)='./file0\x00', &(0x7f0000005800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000005880)=0x0, &(0x7f00000058c0), &(0x7f0000005900)) r34 = getegid() stat(&(0x7f0000005940)='./file0\x00', &(0x7f0000005980)={0x0, 0x0, 0x0, 0x0, 0x0}) r36 = getgid() stat(&(0x7f0000005a00)='./file0\x00', &(0x7f0000005a40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005ac0)={0x0, 0x0, 0x0}, &(0x7f0000005b00)=0xc) r39 = geteuid() r40 = getgid() stat(&(0x7f0000005d80)='./file0\x00', &(0x7f0000005dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000005e40)='./file0\x00', &(0x7f0000005e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f0000005fc0)=[{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)="6d76d77148ee7a5f90ab31fe2633ac06b312edd146b8019348793b4fe01cfa0a4c0cfb8f90b2675bdfa3c7de5d6365b88ffcc665aca22075612ae2972e83bbfd47ca2856d6865e1ea1487bc05b2522", 0x4f}, {&(0x7f00000002c0)="9fd3a2a538737404c64f20bd8c006069f1849a9b53304be38b79939e84c4c277390e5279dc815a77a064fb8ef66f2548b3ccd92c9c5be5ec901170fefeb8e1d14d2a503abd95c976332e067910ad436bee4a8cd9a456cdeb077118f305efbab8ce46ef", 0x63}], 0x2, &(0x7f0000000c00)=[@cred={0x20, 0x1, 0x2, r1, r6, r7}, @rights={0x18, 0x1, 0x1, [r5, r3]}, @cred={0x20, 0x1, 0x2, r1, r8, r9}, @cred={0x20, 0x1, 0x2, r1, r10, r11}, @rights={0x28, 0x1, 0x1, [r3, r4, r3, r3, r3, r5]}, @rights={0x18, 0x1, 0x1, [r0, r5]}, @cred={0x20, 0x1, 0x2, r1, r12, r13}, @cred={0x20, 0x1, 0x2, r1, r14, r15}, @rights={0x20, 0x1, 0x1, [r0, r4, r4, r3]}, @rights={0x20, 0x1, 0x1, [r3, r0, r5]}], 0x138}, {&(0x7f0000000d40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000000dc0)="ce4831bebc3e2fb401", 0x9}, {&(0x7f0000000e00)="6537211e58d2e1a02084707f08be7535c2f17943ec6e978315e87b7c14fd1bcbad9bae8aad3890b9e8d938622846da44ba1c7e0a140bc3607b77cb2d67a8f8c09d07db0f0bf00be9d24b2c895e9c9ef2cd0ec35329c372731dfb3445f97a35f76774f460dbd1870a9527426c5be382dae2e569c304cf43f6f7184a4206a90d610046c38a5b32d400341f4bc366c8c27316039adc5a7f62260498", 0x9a}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)="fa39982939cd0bc1fc960fb5bb4449ff6e59ff2abf4a72f3f29ad56ea3b9fd8c237684444029e692810afaf315cc000f7f4e9887e10234cface0f194d7ec1d9e67ce45e70d9b7f2526cbe23b9e7835ea7cac97cad0cfcddc17336ca46d4d03d39470f2af44d6771c51cf2df68910ecd7f13b740d0246d795d659593fd436983bcf", 0x81}, {&(0x7f0000001f80)="92b7d9ec23c21abdb5150069d2b41012d14a1ecb6be85ba96dd0835ab09a7bdd6e9d8aadd6a6fc408b02a6f2a3d635ac66e9a97a3be9196c5bcd15336b677b9c8f646b1aac677c2e73b37a57e8a6a54f0ab7a295af6ecbf6ecb1a36daf297653f602570bd3540f89b98b9b5af4588e95fa2eff438bf57e289506302b5c468ec3a9c627cc16abf97822a3bdf1dc6c3e67f695a81118da0a54e03f2283b54c9ea858dfa2aafca1b30692a16ffa89a720d7671237a914260e3f", 0xb8}], 0x5, &(0x7f0000002200)=[@cred={0x20, 0x1, 0x2, r1, r16, r17}], 0x20, 0x10}, {&(0x7f0000002240)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002380)=[{&(0x7f00000022c0)="ae035d189f85590790d9de720b9a9970e8fdd97764f4eccf0a145fb12b1ed88de0a5d5f3f953a74cdeef26dbf0bb142aa259d86fa7f88a8c2712e162d362febcdfb1651dfd82bc34aae3edba49fe99a634edcf10fbaabd787427bc827cf3b91bf4de6aa86cbe1eb3f468c29870a046f8b8a918a6959bc5551bbde281dd3904ea60a17b144d407397e1923b", 0x8b}], 0x1, &(0x7f00000024c0)=[@rights={0x20, 0x1, 0x1, [r0, r3, r5]}, @cred={0x20, 0x1, 0x2, r1, r18, r19}, @cred={0x20, 0x1, 0x2, r1, r20, r21}, @rights={0x18, 0x1, 0x1, [r5, r4]}], 0x78, 0x4000000}, {&(0x7f0000002540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002600)=[{&(0x7f00000025c0)="0d3b09c5a88b52fc2e715d069b4046aadcf96b893a857d0d5a77051590529f911e781cabcb3d0f5d608177a62d6de099a8cf639f2f333100", 0x38}], 0x1, &(0x7f0000002640), 0x0, 0x800}, {&(0x7f0000002680)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002880)=[{&(0x7f0000002700)="6350304e14e04496b16f31f5483c5d7cd0f0fe12342e81cb49b4c93b04c940117933f3a66ab928da7990ec06941eeb83edd9818b0d77886563ce566e6e8391c6cb6e4706d95e582c", 0x48}, {&(0x7f0000002780)="3060e5a6a36dcd08d6ff444e8c4ddfc855ba62c2b97270de4a938a9ccbd678cc0fbc2c8035f9930362ce2f4b685ea5617b9ec795bcce766c13a11cfb2d319a9be2f5de2c3e3c06532db9ab30638e5e027609c435f720cb854dd7113382475d175a80c63f0cf1fcd39c3e9561732e3e4d798d73ed58d67eef04e9877c13f396f223cdd827cb6277cac44c654d851d96877f15089986f2d799bbdf3699e18de931ea1bc3bd60d656bd1dfa23ba9f8c088b2ae429dcb378219859f4835dac13266cb7448c92fb18", 0xc6}], 0x2, &(0x7f0000002a40)=[@cred={0x20, 0x1, 0x2, r1, r22, r23}], 0x20}, {&(0x7f0000002a80)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000002b00)="2e4e3e4096038855521247c45c31d8cda4c4576135ca6f70e595850688e1fc4ffd880f8d2ec1cc70c4a0b5361a47240a6df3cddb253e011a26bef1b7df78a5e8f6749f69351e0450bd0540e8a498e2f4fcf08e6f71e80d7a02237a40aab50f4ce3afd413533c95935e", 0x69}], 0x1, &(0x7f0000002e40)=[@rights={0x38, 0x1, 0x1, [r0, r0, r5, r5, r5, r5, r3, r4, r3]}, @rights={0x30, 0x1, 0x1, [r4, r4, r0, r4, r4, r3, r4]}, @cred={0x20, 0x1, 0x2, r1, r24, r25}, @cred={0x20, 0x1, 0x2, r1, r26, r27}, @rights={0x20, 0x1, 0x1, [r4, r4, r3]}], 0xc8, 0x10}, {&(0x7f0000002f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002fc0)="aec2e3e66f0f7d5d7c8d830718057e88976abe9746712d5c074f0343956418d2065520b35ee6c7315f356b8fcb7b7c025d236ae4b754", 0x36}, {&(0x7f0000003000)="29152ff44f805f764e306bd6f5124f4b7290a5fb90d3110be93edd15d8074b092e294be7255a9c66a0d7b1ebdbbf8030bfc26ed2f134c114cf4ef3d92ad3bad24173715e4413f4a43868dd86d0c8615a72231094fae01f5699e7bf48440462036aef1ba9bcaef210c586179f39e2fbdd0e334858adffcceb1cc0571f3a99c2d9cb7d3b8f0af486307b52fe8c0eb890060c", 0x91}], 0x2, 0x0, 0x0, 0x4000000}, {&(0x7f0000003100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004180)=[{&(0x7f0000003180)="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", 0x1000}], 0x1, &(0x7f00000043c0)=[@rights={0x20, 0x1, 0x1, [r5, r0, r3]}, @cred={0x20, 0x1, 0x2, r1, r28, r29}, @rights={0x20, 0x1, 0x1, [r3, r4, r0, r30]}, @rights={0x20, 0x1, 0x1, [r4, r0, r0]}], 0x80, 0x48000}, {&(0x7f0000004440)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005740)=[{&(0x7f00000044c0)="e171c3a6d25e8bbd30f5cd6b1e81fb13378fa330728cb9edc9637874a190436faba449866ed157b18cb6074e94a25eee4a4d58614eb4f1972084fcaf4dcb3a63d9e44fb62985e29ae3dea47096022be7b420b26f60736499b5d660b07f143cb285d4a0b2321eb31255e699249c1f3899c63ce88b87c5590e2ed64a8014066f910c42a25c1969a8f252663ad184e3e34484", 0x91}, {&(0x7f0000004580)}, {&(0x7f00000045c0)="bfa3c9779421d224bb2a9c857639f71ce6185ed3fe191a5fd61d363f4879820c1d6b0007deeb03ff1e86b9ca52800753e8d469c3bae1f6e4a9b573220910a9fbbf5123fd6eb602d0714e8a2cdb3dad4ce0cea8ca683d298ebc52d942c6272268368d78cc64a02c295bc1859a22e26d017c485ba59e642cba17966dd234d670d6569c5fc5e2", 0x85}, {&(0x7f0000004680)="e63c9454d4d23f36f2b64aadb7e7a41b820c922aa1fad15ce3fbe170361d77759ee34c2faf76a671b499acf990ce0d586d80f9eb940157bed984cde847aca3e52af2", 0x42}, {&(0x7f0000004700)="10ef439df17f4acced395a06f6ff1a828186cf2c427b5e898ae0e2df43646a9f8fc32a629f88c1034374111ea769dd8df16b38cfb8f6e72190de2989e2fd26a6e111a7c9bb3674887da84cc1b7faca5ecd7320dad8ccd8040c9031ae41d6bc9cc54eb6776aa9fd84df63d07ab453157e10dba3f5053de8ac6c620ad3a6a26b3dab8e2386e4bf66edcf9b4c1b1404c73775bc085afb81f703d86f088b4bcf52be2c619d9f9b7448d71aece95ab94e4c61b60dbdefc0a790faa7113c37b938a88e4192c10c09da66aaefd0ed64a55ab9be4c8a852e5262ff50280e40effbe1f968f7af0a8feee16ee537be364f7a7d9d2957bfd869e0863ec2680c9e3adf439fbdf38c15efce513807c8a7b61dba962d8727c9dd0d0069f4ec5d30a806aa40868954d9385ce349caf22ce9ce2c2c9cc5b854805a4be79c380ece7dd7ea03f71f0712d4061bae5c677d23bbc6dea9956c871a46aa5d9f1be7f49db95ad19658acfc7c808676c172f17524442af7ea2a6243621f5ce44db429118a4ef5dcbc57af2fe8b8cef65c400f6d8f50a78f4fd9ef00f6314ec74f5b5488c0f35677b8997b012f92a320b8ce7f111d374526c18a17cc40387e08a0a35233db190a701484a0cc6909f59258846171f18bbbf2aadc41b8373d51132f06491dacc0413beed235f66b986b54d71cca3c7ab6ca93c83da7218b60e69807bb460f116019f8d5149f8096583b21c48524a3ef232334a7b177762ec9e2b24f9333f1a90a8df3b20f6a00c65ebb9357ae21db9078b3b598d4e1805bb0bc343d5380e76aa187b2795c4b3c5ec534f4f7e12d061b27ea57e4ee8b215ed1ad8ae996a3132009e6b9dbbe307d775de39bdceae8d42df7bf51d1b1db2e834cadc9f11ffb7b5506246d5b54c9f1068d82fc6d0fb86d869b6d9d469ae4a19a208786ec43619f4cb9da8a8c7580d1119dfb09fec4e4d1310cb50d7182f748754f6c7bec91d38ca24ee687fd7e27dd1af6b0e9b19d273297ab93bfc32902b0a80cfffbd04131ced4fb5e62941619ed475bc336d396f418b8f9db5540b60aabb374f366d5cf1fa3ab834215621bfbd38328ff810c509360fcfabbd3462175568d5447fbc85480cbb42c5add6d4f3fb908efd5ec8cb63d22c1966f334d6ccdb78b4c8c0df656ff49e9d168ae96923dd9306640ab15ac38b7a6a1f1012f1685a2fb372e147a36a49512ba61ca9b84ac7ead74c17cdb229e6cbbd726a04f08455746546be405d1d64504d6fd6992583b2f07bba89013bc11276424335109210d1e7261d86999a51d87eb5e86719466a1f775a03c36e253c1855a12978320f9fd9a17bcfa9a25e5b8818b8bde4b661d7e74c9fbc62dedde06f7d0cc46d0b15fc28afc77dbfd9edbafb2808d8850167359ea6976025b3cdfaec11e7c8bad3c8416101f96221391271fb40c0e7093efbbb8393d5695ab3455e03cdbf1a904a079e83c0c0131a0255f836e7a076bcf58e7eede6083e79f802ac67257701e05baae0876f6590305f2d6d4eae203d15e0583623950f6a1632ac0937900b36530ec3eb4c93916fe48675cbc4a18c099c715cf961cfb3659f39a9fd993b836ef097b12fada47902611100f13487649cad9afba090cb602e7c29226ac67bdb88b963e74d896e0c4efe5e493a47cc9ecd7acad555d6ce3a655d04bc6ac39aed6b66b601f8700c9232a26cc8667e28e41cb7242507674f8fb58d7840db9e5794bddb0fc414b01c077c5b84de9595cfef53aa1257b51c9177e73480d5649354dee2aceeafb14f30bf0fcef9e9d7efa7af8061723bc5528ae1a9f21d776f950c1c11ce216e6042d89aad1813c07e1838bc178a682c7560233bceae33d4c911a1a0ec62ef95a9896eb5f7fb7e0b1f89b6eb5d2b21bd39c50d2b990d79ce6ef8ce3be5911150f2e16ad435c763249643ffd42c8c74be71237f139970b98fbbcb845d394e0e88b252471423221481b6b8ebf13135c58bacb02ca1d7cb3c74e32d4dee67c18457d7294594210dd1991709639256622297c4d09fd217005921d4a4a1dbaed06c332f858a412bbd006ef5bbef30fa051ef0c9d34748a9f06486bf222b9b5e11b7b87a8bdc863df5da85b52bebc76b56f08377153bd6808d8745f11be81324644c23399c32af0e80cee2add3494d45fbf348cf28a944826df435f22d90d127c261020576de5a9b5c5068ff784dc9f0d83ff945bcd284fd8bf5f42ffb24fd1922a06445253790eba89bfedff12a7a25edda15245010deebabb978f721617f9630e3632e4bbe6f5cd22febb9bfb9b545248cdcd496b6c42ef90cc13863f31a746694134241f3923d9bd6a1c6a37bfb0a3ecc7d76985a859e2b24c0f8ec2fedd19ce0b6131c25cce226f899b3815d8b044819ba8b6c28afaa63a9ead0b70499e565261dd45861ffb69d8614e67630bb68103d55a4ff38ffd06566fdf8214f5e2181b64eae7e5c59b9bb0165bb3696b848e90d585945ebfb026728455c21076480df3e3e1ce5117ad4eec6c18dbdaaa58dff399209f7d6a80c033d29a638b0a4a3fbfdebb8cbbaebe6ef365ab41b11ad984be7787944f693d8139d3bf7571cfb94f0ac54b961b44ed0725a9b99ffda78973b8a6580d69d1ed57c7df08234c01d27049d8b64651f209dd5859158aed0f1e1187cb8c5b92d68616a498f70c5cbdb836682fd1fad3163ec42b98ae961200a94ec930973657db24061609fc37844585de9c47606e55e42711c36344aafc78d19035a1a7b2037ceca5be5679281cd431c25991c9be6406e671d98403ec09b31265a23a741437bfb70702d31e06ac369f976a8efa7fc036c11f4e72db6d4128093f71d530edb102424e63fe4830924fe89cd40d4719eda1d08e4004f4ebfb36dd6a366f30eacb7287b2e00ab763f895985ea326917843902551c7222e59579baa9c2fcc7cf001464ec5b65f58cdfb66fbf400461f445db3489a2a95257e31e784285841369e54844cc67c84ba782030eecd36eb401c385ab9f946f1bc3db7216091a4d5ca41da9a19e821b87cef97ff8c4522a822f9413b8b4b1c34907ce8fcca3b36fd8b9e2323eefd246e9860e6e493d4540d83eab06696adc603080fdf26a46280ef8d617b439ee3a852d65bc2f6dbdfc768866398f8490ea47af274c471267a8f27db352aa6f5773dec0b421db0fa7ba7d65e934d5a9874711f3e56c55dd98b5f42f87f271919736b5d009d6c1f42d74ad307f24a8025b2d8fe375d0842946a387dc40aa4e7480b2ced1065359a8c30cc13b5b709c7dc60142e721a6eaf169b33fd75850741967bc1a6a5424e3ab3c60019b362b59ce1fedb1212c1397ff58cca85da7e040dd9bb1e7f5736f57af5780c391088b501d23932955f9522780fe267568bbd86b81aedcce055484702602070606286ef99080d4eccf92d0a71834abda93d72637ebcc51edca9014ba14bd4008193a6e3112b13a6de0d96086f584b7aad1aedbc9dbd5d8cce275510b197ed3b3735de548520f73cbeddc36ae10763ab53c418391f0eeda79c864f327ca88faa6122ae4b686b2010eb831e43c7fec3ac3e0db66f7161af7e6e56c29c4b3c76d3bfb04d644f2adcd7af08fc153db07779f2850a6e3725e409512753313a05eefb023b28108b5821902fda191948002f6a4028ec76c1cedf3333351f510e46812a2e7d36bbc960e5ed9c14e76b5779259c30066564f8ea44fc2342a411221cca9a129ec720d59b1ac0136b536cd2e52be83d24dbfb3db4b344eaf9572abbd7b208f9cfcf4eac09e20ffa3aace3f29e90eced5063cc3e5ebf6ca79af49406668490dcee9a26ac19e65a445adbe9d0caa4163720e82a30d8a79761562ec6f73d8e36baca52477597044f490bde7771433bc306790f796d6e41afb9ad75c2f726290bcd4d0554c46a2b2137186f4bfdb8de8c350045d139668f8fa84c6902d69c53d02f29bd1c051f27b3877d35e940aebd6560212b900332d32fad0acaf3f11c77e0ff551d03b746ca5efbc6ebc558b59515d73766cf0602960d9c72f8ca13c4a705c9d376460f3540fe7289fb7c2a9aa6c322ada550d53ccc42ee398006ad2ec3f8a32350e58aaac24333814be7a58c55475f1d43af68e0c807d079a0edf902b13f9df42da3d79ec8e2b604680741560bb07e7ed710e428ca88b43d88e797b99fa99f4f06ffae3c39d17e68d474899230096b5bf3a700673866b17a4f55de48d7dd26bfd6e9fd6a0a3df7f679a7d5d9a4e5c278510b626363e4a59253e0d891b49b258c69a8827abc0ea9e6b7e64641e3d24840b08311898907cb39641197d2b96020dce356fc4d0d6d9d3e55d95b221601eb1ce55bda63abf6dadd8ee7802ee9f49a3f75b1b1fa6e910d7175acfa54c8caa4188f3c12a4ed67e54af8686de760f6378583cf3a26138291bab6c0c8d671e5128043e7a8beb3af55342547b8a06d65736f12f47bb1137b4beb4fbdb625a7b67dae91870b6eb4146a87b386ec93875782872ece088971f8e1ea92e9ed286df267896aee72b7d1fc17d555764dc281392db53aa071c916679d9ba9df60bc55cfb005b4fee9f3395d142379f691542d43a8327bc8421a274bd105e6223a0a30140102ba139db0aef5364f20347e88e19eb591c6fd1544725e1f5276467f687da1ec8859a70741e663a89e7bbd4ccbd2c0c1e2665c9cf8e3ce62a72335dc3be8f0800806142ea4e56ec3cb054c16ea58d1cb3e645bf2deb3f502b854ff2abbf1ef6daab8e21ff3aa273f82346cd223609518a96c53a73dc625805595f6204c7396f67d56bc35c9b6bccefabd8c5c1ca7a10fd09d4807cf723b2c8a1d66f57506cd869fff15264ee1c18616de40da2d05a70b9bb249cdd5cdb0db564c0b3c82a85e8ee95634d19e970d6ad9b4a6ad942d37c5ddcf7a24b2b6438512528010f386a3e7d2050fdc3d0c04a01da2560e24b5f9f200ea3ea9ac366dde600b1f82e69b8c60ebe2e3a90a21f8c572f2df24ec4ace082fa692b2669264f99e56628b8a38601c8ca2ab25e0cc279ca7390dff1e111df0f28707e3411365cc7c1305507dd43d1cb48966c4d55f9548b2fd017db3190faf56f2037e39e1dc653d73da26bbd01b4a1c4ac6be56c3588755992c90df57167cd7533a5ddc01540ef7687aaeb6f6a8d6c82d7edd3145925fe4662dc8daac9472dad4530a433753fb24d318ae731d93bef52b77abb2c64c18bb729d94df6aa00cfc50b11095dfee32fcc2d895a2f8a9bf9ad8c4eebb3cb2fbd4bebaf39c78e0e411b8905be42028c720997d7d1f7a3fb709c57839d8620b78ab590a217e59fa12f9c780c1f0b957efefdb597cb6da32a88488f5ac5ec1a1f492e6f8b20a3d1e148ebaea6d1a0203e2585ce00792deb157731e18498363a93a4f15a4240cc36615572c13753c476ac345879aca54eec122a4f171fa1d9e28894672a4597ec17d70987ccc80ec20309a2fd5370caec71b12696a90b32d2f172c8671f263085985ac101a5f0a31b4e2aafd9c18940e80439fd57e5a7c433fa9f28ab5b5468077b78b3d25ca77c1ffa73982194368b1ca2d9c78ee03f7efb1fb1f0070ea030744e8d222501d565fa8c8056cba9d5985cfd84bc5de70a4bbbd1e70676995fcf53810532cee7f01b4e0bc0891cadf0666326f5d3bceee5a11a1ef2385adf69925c08a0f5451cc47ab138e9696114f80274be09a120eedcea3b2406dcd30b687815de6cd5acd56cb790e9cf8419d227a5b68cc076bc38b8904276ddd96fe0a7435c9a48f27ed43cb00c7e9bc8ccf2598abafaa391b6709", 0x1000}, {&(0x7f0000005700)="e888659c96be7f4ee0c20de39a1e318a7d889465f48bf40b2269527b26d7a2e4e6a38d0ff924567cd04ab8fb1cf7469128b683e8fd7c9b6876124ebc403fd759", 0x40}], 0x6, &(0x7f0000005b40)=[@cred={0x20, 0x1, 0x2, r1, r31, r32}, @cred={0x20, 0x1, 0x2, r1, r33, r34}, @cred={0x20, 0x1, 0x2, r1, r35, r36}, @rights={0x20, 0x1, 0x1, [r0, r3, r5]}, @rights={0x20, 0x1, 0x1, [r4, r4, r0, r3]}, @cred={0x20, 0x1, 0x2, r1, r37, r38}, @rights={0x18, 0x1, 0x1, [r3]}], 0xd8}, {&(0x7f0000005c40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000005d40)=[{&(0x7f0000005cc0)="8c18fec91220b1233de840d9a5c63e006d178c0208d34469d045a05af0cc78cb280c093f027ecd3e62317c87411c96127ed6f025684f162799d77f3ab7335398aae884f4982e2ce9e124d6c007f1772f6e9045be9cd3e3ef1e309a6cf0f89daa853e9eff58cf9f1f7cf24129fd62", 0x6e}], 0x1, &(0x7f0000005f00)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r39, @ANYRES32=r40, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r41, @ANYRES32=r42, @ANYBLOB="0000000028ba0000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x40000}], 0xa, 0x48000) [ 1013.404626] input: syz0 as /devices/virtual/input/input188 20:48:06 executing program 5: 20:48:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000000000000400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:06 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r5, 0xffffffffffffff7f) io_submit(r4, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r6, 0x81f4}, 0x4a9) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYPTR, @ANYRES32=r1, @ANYPTR=&(0x7f0000000980)=ANY=[@ANYRES64=r6, @ANYRESDEC=r1, @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYPTR64, @ANYPTR64, @ANYRESDEC=0x0, @ANYPTR, @ANYRES64=r1, @ANYPTR64, @ANYRES16=r1], @ANYRESDEC=r6, @ANYRES32=r6, @ANYRESOCT=r7, @ANYRESOCT=r0], @ANYRES32=r2, @ANYRESHEX=r2], 0x5}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r8, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r9 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r10, 0x1) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:06 executing program 5: 20:48:06 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000000)={0x400, 0xff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffaf) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x810005, 0x0) 20:48:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="e3d65b5cc6960b749ef4a5ef98c23ee79a234004", 0x14, 0x4000, &(0x7f0000000800)={0xa, 0x4e23, 0xffffffffffffff00, @mcast1, 0x7}, 0x1c) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000780)=ANY=[@ANYBLOB], 0xffffffffffffff61) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) [ 1013.722387] input: syz0 as /devices/virtual/input/input189 20:48:06 executing program 5: [ 1013.808302] input: syz0 as /devices/virtual/input/input190 20:48:06 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r0 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) ptrace$peek(0x3, r0, &(0x7f0000000180)) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xb11, 0xa601) setsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f00000002c0)="f4d607346b776088bb97dc89c7ae54d18bfeefb0c724bf904f926d81e5abeb9eb594f096d3515c25ad6f66f80d71a492b140dc8642a9808ddc430bb6109ac51046143dd68453fcd60fcf", 0x4a) munmap(&(0x7f00009fd000/0x600000)=nil, 0x600000) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000100)={0x1, 0x8, {0x50, 0x80000000, 0x100e, 0x0, 0x8, 0x6, 0x1, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(0xffffffffffffffff, r3, &(0x7f0000000080)=0x142, 0x9168) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x9, r0}) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000200)={0x6, 0x1, @raw_data=[0x3, 0x7fffffff, 0x36, 0x9, 0x80000000, 0x30e, 0x100, 0x3, 0x11e, 0xff, 0x97, 0x8, 0x7, 0xfffffffeffffffff, 0x9f4a, 0x20]}) tkill(r0, 0x1004000000016) 20:48:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00\x00\x00?\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:07 executing program 2: [ 1014.028711] input: syz0 as /devices/virtual/input/input191 20:48:07 executing program 5: [ 1014.081111] input: syz0 as /devices/virtual/input/input192 20:48:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x4) 20:48:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000001000", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:07 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x40000000011, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) flock(0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 1014.371825] input: syz0 as /devices/virtual/input/input193 [ 1014.406352] input: syz0 as /devices/virtual/input/input194 20:48:07 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r5, 0xffffffffffffff7f) io_submit(r4, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r6, 0x81f4}, 0x4a9) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYPTR, @ANYRES32=r1, @ANYPTR=&(0x7f0000000980)=ANY=[@ANYRES64=r6, @ANYRESDEC=r1, @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYPTR64, @ANYPTR64, @ANYRESDEC=0x0, @ANYPTR, @ANYRES64=r1, @ANYPTR64, @ANYRES16=r1], @ANYRESDEC=r6, @ANYRES32=r6, @ANYRESOCT=r7, @ANYRESOCT=r0], @ANYRES32=r2, @ANYRESHEX=r2], 0x5}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r8, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r9 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r10, 0x1) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x3e) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:07 executing program 5: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b5dfa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, 0x0, 0x2b) 20:48:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000001400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) write$P9_RRENAMEAT(r2, &(0x7f00000000c0)={0x7, 0x4b, 0x1}, 0x7) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) 20:48:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) [ 1014.750401] input: syz0 as /devices/virtual/input/input195 [ 1014.805663] input: syz0 as /devices/virtual/input/input196 20:48:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 20:48:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setfsuid(0x0) 20:48:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_LSEEK(r2, &(0x7f00000000c0)={0x18, 0x0, 0x1, {0x7}}, 0x18) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r3, &(0x7f0000000080)=0x142, 0x9168) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) 20:48:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00?\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:08 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r5, 0xffffffffffffff7f) io_submit(r4, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r6, 0x81f4}, 0x4a9) r7 = syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYPTR, @ANYRES32=r1, @ANYPTR=&(0x7f0000000980)=ANY=[@ANYRES64=r6, @ANYRESDEC=r1, @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYPTR64, @ANYPTR64, @ANYRESDEC=0x0, @ANYPTR, @ANYRES64=r1, @ANYPTR64, @ANYRES16=r1], @ANYRESDEC=r6, @ANYRES32=r6, @ANYRESOCT=r7, @ANYRESOCT=r0], @ANYRES32=r2, @ANYRESHEX=r2], 0x5}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r8, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r9 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r10, 0x1) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:08 executing program 2 (fault-call:12 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1015.133016] input: syz0 as /devices/virtual/input/input197 [ 1015.223254] input: syz0 as /devices/virtual/input/input198 [ 1015.309979] FAULT_INJECTION: forcing a failure. [ 1015.309979] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.325348] CPU: 0 PID: 4715 Comm: syz-executor2 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1015.333868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.343237] Call Trace: [ 1015.345854] dump_stack+0x244/0x39d [ 1015.349510] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1015.354725] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1015.359508] should_fail.cold.4+0xa/0x17 [ 1015.363587] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1015.368705] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1015.373658] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1015.378695] ? graph_lock+0x270/0x270 [ 1015.382516] ? retint_kernel+0x2d/0x2d [ 1015.386442] ? __lock_is_held+0xb5/0x140 [ 1015.390537] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1015.395309] ? perf_trace_sched_process_exec+0x860/0x860 [ 1015.400807] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1015.405407] ? retint_kernel+0x2d/0x2d [ 1015.409312] ? retint_kernel+0x2d/0x2d [ 1015.413222] __should_failslab+0x124/0x180 [ 1015.417476] should_failslab+0x9/0x14 [ 1015.421294] kmem_cache_alloc+0x2be/0x730 [ 1015.425463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1015.430343] mmu_topup_memory_caches+0xfb/0x470 [ 1015.435040] kvm_mmu_load+0x21/0x1290 [ 1015.438853] ? kvm_arch_vcpu_ioctl_run+0x3e5a/0x72b0 [ 1015.443970] ? write_comp_data+0x22/0x70 [ 1015.448079] kvm_arch_vcpu_ioctl_run+0x28ca/0x72b0 [ 1015.453036] ? perf_trace_lock+0x14d/0x7a0 [ 1015.457377] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 1015.461667] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 1015.466522] ? graph_lock+0x270/0x270 [ 1015.470341] ? __lock_acquire+0x62f/0x4c20 [ 1015.474592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1015.480168] ? find_held_lock+0x36/0x1c0 [ 1015.484257] ? get_task_pid+0x1ea/0x3b0 [ 1015.488260] ? lock_downgrade+0x900/0x900 [ 1015.492421] ? check_preemption_disabled+0x48/0x280 [ 1015.497472] ? kasan_check_read+0x11/0x20 [ 1015.501634] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1015.506928] ? rcu_read_unlock_special+0x370/0x370 [ 1015.511879] ? get_task_pid+0x211/0x3b0 [ 1015.515886] ? find_get_pid+0x270/0x270 [ 1015.519877] ? debug_smp_processor_id+0x1c/0x20 [ 1015.524574] kvm_vcpu_ioctl+0x5c8/0x1150 [ 1015.528653] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 1015.532909] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1015.538645] ? find_held_lock+0x36/0x1c0 [ 1015.542738] ? __fget+0x4aa/0x740 [ 1015.546203] ? check_preemption_disabled+0x48/0x280 [ 1015.551225] ? kasan_check_read+0x11/0x20 [ 1015.555373] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1015.560644] ? rcu_read_unlock_special+0x370/0x370 [ 1015.565577] ? __fget+0x4d1/0x740 [ 1015.569030] ? ksys_dup3+0x680/0x680 [ 1015.572754] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1015.577683] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1015.583645] do_vfs_ioctl+0x1de/0x1790 [ 1015.587541] ? ioctl_preallocate+0x300/0x300 [ 1015.591980] ? __fget_light+0x2e9/0x430 [ 1015.595945] ? fget_raw+0x20/0x20 [ 1015.599401] ? __sb_end_write+0xd9/0x110 [ 1015.603514] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1015.609056] ? fput+0x130/0x1a0 [ 1015.612335] ? do_syscall_64+0x9a/0x820 [ 1015.616300] ? do_syscall_64+0x9a/0x820 [ 1015.620275] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1015.624864] ? security_file_ioctl+0x94/0xc0 [ 1015.629274] ksys_ioctl+0xa9/0xd0 [ 1015.632739] __x64_sys_ioctl+0x73/0xb0 [ 1015.636620] do_syscall_64+0x1b9/0x820 [ 1015.640503] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1015.645909] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1015.650833] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1015.655667] ? trace_hardirqs_on_caller+0x310/0x310 [ 1015.660675] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1015.665683] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1015.670524] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.675720] RIP: 0033:0x457569 [ 1015.678915] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1015.697872] RSP: 002b:00007f2d22974c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1015.705572] RAX: ffffffffffffffda RBX: 00007f2d22974c90 RCX: 0000000000457569 [ 1015.712830] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1015.720119] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1015.727376] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d229756d4 [ 1015.734658] R13: 00000000004c034e R14: 00000000004d0bc0 R15: 0000000000000007 20:48:08 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r5, 0xffffffffffffff7f) io_submit(r4, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r6, 0x81f4}, 0x4a9) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYPTR, @ANYRES32=r1, @ANYPTR=&(0x7f0000000980)=ANY=[@ANYRES64=r6, @ANYRESDEC=r1, @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYPTR64, @ANYPTR64, @ANYRESDEC=0x0, @ANYPTR, @ANYRES64=r1, @ANYPTR64, @ANYRES16=r1], @ANYRESDEC=r6, @ANYRES32=r6, @ANYRESOCT=r7, @ANYRESOCT=r0], @ANYRES32=r2, @ANYRESHEX=r2], 0x5}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r8, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r9 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r10, 0x1) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:08 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x800, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r3, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r6 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r7, 0x1) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) r8 = geteuid() stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() r12 = getuid() lstat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000fc0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000010c0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001100)={0x0, 0x0, 0x0}, &(0x7f0000001140)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001180)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000001280)=0xe8) getresgid(&(0x7f00000012c0), &(0x7f0000001300)=0x0, &(0x7f0000001340)) lstat(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001700)='./file0\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000001c80)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000001d80)=0xe8) r21 = getegid() getresuid(&(0x7f0000002140), &(0x7f0000002180), &(0x7f00000021c0)=0x0) stat(&(0x7f0000002200)='./file0\x00', &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = getuid() getgroups(0xa, &(0x7f0000003780)=[0x0, 0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01, 0xee01, 0x0, 0x0, 0xffffffffffffffff]) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000037c0)={{{@in=@multicast1, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000038c0)=0xe8) r27 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000003900)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000003a00)=0xe8) r29 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000003d00)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000003e00)=0xe8) getresgid(&(0x7f0000003e40), &(0x7f0000003e80)=0x0, &(0x7f0000003ec0)) r32 = accept4$inet6(r4, &(0x7f0000003f00)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000003f40)=0x1c, 0x80000) r33 = geteuid() fstat(r5, &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000004000)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000004100)=0xe8) fstat(r4, &(0x7f0000004140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000004280)=[{&(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000800)="b1521bea22d52c1381ab042ac92ca3dd6e1e13abd4ec0c914e17d56a3f51cf02d9e0de01e14fe0941be4a3c0c8d4fffdf12ec0f54cd0d9661eedb8db8947d9eae3e4ea487288acbb06d7bf16d26998b15343f0dac5833ff23aba637bd5d3f62c19bb8ff3170ffce05a7ddf498a77b72d595f54cc3c5bb404b27b8c4674d80cacf2c4e3d0ee8e0581ab879232d6976d867db7b84a3834a9dc3b59", 0x9a}, {&(0x7f00000008c0)="ce8d01da410c9461fb67696db6a26e8de41494037d6312842a6c2e908c9bce8a3a983c2ebd827b8df2e2a77cf15e374bb6f22f4446a4301bdf3d9f5a264150a1275c43a03ccbb3588fe5d7d49bc505a6e4f6c74e52b55ac35bdc17043f2988ac8807854aadba87636e63396ecc70f2076ad10666182a011bc34c351fead42b15824ecd3c98f3e48afa4e16aef319fa2857ad43", 0x93}, {&(0x7f0000000980)="fb129942291185ead6cf0b14b1a7772ab3c3f0d519be619036b5ff2ad430214f86af62dcdd37df1465dbe321d08660070b6c92da0779921d23f3f4fd05bab51473fea63b5eefcdd9c900eef156e7d039f3c7b279c72d961bb693a64e69ffea6aa655dc8beb34e6e08bba45c464e80557f82c71e55014beff7af76cb52a867cb32c9e819e0ae7c69a91c43c227bb1a40da3122d6db54a596172bc8e001e4ba02c7c5a0f2dc965636a336ee4cbd605a0a26ac62653dc93", 0xb6}, {&(0x7f0000000a40)="13df0ff766e0401e7b271373dc56e2b2c14efe79f74ae65d56c239e96dc8a6a8fba9462fcbf9170d5e4fffc0d862ed6952b7ba131baf9a5d5fbfb018604f9284a91319bad5eff10223850913cc17338f3eb48b8b14593f7655c9c4fee1c43e3055f07c61cb91f2dc66c5c775f1386cd2f2be9adc264b0b715cdc755d883c09de927fc18fee9a0bdbf77923291f4efd5d75c3f7d6e698b7f6c3df3b5643938ea29effece285a7c686c3a11897b5e671a5fe6d90324eea33dc2e019792c3f4fcb2f552f717a7d8df1d7c6c63200a783ad44eed98cfe61570cb3c9a", 0xda}], 0x4, &(0x7f0000000d80)=[@rights={0x20, 0x1, 0x1, [r1, r1, r2, r1]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r1, r5, r6, r5]}, @cred={0x20, 0x1, 0x2, r7, r10, r11}, @cred={0x20, 0x1, 0x2, r7, r12, r13}, @rights={0x18, 0x1, 0x1, [r6]}], 0xb8, 0x40}, {&(0x7f0000000e40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000ec0)="dfcf71d759d89617237d78", 0xb}, {&(0x7f0000000f00)="af5673dcb2279b2ec94cf35385fa896f7277f952c661901013fad2504d13f838fb788e5fb64c8d337b9a333adc4dd5c5f7954bc5bf318350868e41534de6b7174c84c0174e34257d155fcb67", 0x4c}], 0x2, &(0x7f0000001380)=[@cred={0x20, 0x1, 0x2, r7, r14, r15}, @rights={0x28, 0x1, 0x1, [r1, r6, r2, r1, r2, r0]}, @cred={0x20, 0x1, 0x2, r7, r16, r17}], 0x68, 0x40}, {&(0x7f0000001400)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000001480)="3ce654032e0fffdd57f8139abcd9140f444628f28ba00ccc8125102a04c78f270fbabbe379a37da5e92b2d043384b0a4cb8f8909736aae2eb17dd7b7dcad86b1743d57e8190514362a9a174dfd35ca14aa12c3acc61efad596608534d42f44065c54765d35e48734aaaa8bd7c917e020ae9e8ffe2654f4a5353010d9d9000127a7b6f900dbb20c75a6cd812faecdb4d69156291495dc7a73788f34ca93b89ec63b103167edc311f630a09045ec4a46f00015840e8d17893391c3916376ab77be08ee052a3cbc561a8de5d3f7e61c", 0xce}, {&(0x7f0000001580)="f45c06161cc4f124023ea3d68a4e74500f3cd855d2aa40fab95a864576d149b1c5749b16cda356cff39619612154a59dcc74d53933f986d9768006805356f9aa6a51", 0x42}], 0x2, &(0x7f00000017c0)=[@rights={0x20, 0x1, 0x1, [r1, r5, r1, r6]}, @rights={0x18, 0x1, 0x1, [r5, r5]}, @cred={0x20, 0x1, 0x2, r7, r18, r19}], 0x58, 0x40}, {&(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f00000018c0)="0c22d023fd92ed796f6cc783ac9502a01caacbf0c8a346effa68d17dd3788fac879159037ec0c3fba6577a3985d8e0fd962cca37217dc339fa55923822491446cec882aed41c29aff29933e253af6bc93f520dddbcf237c2ae26a8a4", 0x5c}, {&(0x7f0000001940)="05b04a96b54a2114270c7fdcba034da98bf08968076d2a38432d8ca685cd9068c644e9d73934407bb08eee94fbaf79e214a5ce8a6a99d4574009c5c81101dcf53db8839414ec4f6342fd6ca27135d6b94ada7f2f64b31d790f6b159c00ebd137d813a123ea3e870a8bb707783caa93e237edf09e5495d721e4bfcdd9fc77fbf12f5d96d84f295d85086ff4e92a98342dd35ac20e3a12ba928ac48171516a61690e06af949527d3f3a3", 0xa9}, {&(0x7f0000001a00)="3777c2b4d2d9e4d9acd0844461b7c755e088c0cb2d3a33f8c92692b8f002be14989bcd4d260d0cc62e33c3c720501cb5af1d0c0d8aa82203944e019d71d88a53b88c17ee4a77dea15cafd643d166ec9a0f9560241197c182bcaa71c9c918d83a3d8015882194e515296ee8e750373de6c97e1444d92c81cf5551b41b3859b29b349c56c3f989d54d4de5abfe839f9419d1b805946ffa79c671870ef1993565cbde2ec5cd1a40f6276b9f3bc3b3523945f844e017b404340674db84672bd4dfb0b2cd8e2807cbaaba840b932da8572bddb270a319bcae6ef61ea7ebd0cc4e10808bdd378e2837b134e9a5bf4a8d", 0xed}, {&(0x7f0000001b00)="80df7a014df3f0b5774aba192c71d815ebe1315d86a71528481f1f604a96b3afc0f7d4c4687fe02b0300785dbd37852f51f460264e6cce83413eeabc84e6a1b53cf9ed02", 0x44}, {&(0x7f0000001b80)="57f199aece8dae28e3997343e78f1b09c426e226f90c559b97673ead73fb6c48029fef9c4fb33d2d7046a4980040bc63b24a5ff061c431ea550eb50fc10fb3eee994ea", 0x43}], 0x5, &(0x7f0000001dc0)=[@cred={0x20, 0x1, 0x2, r7, r20, r21}], 0x20, 0x8000}, {&(0x7f0000001e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000001e80)="c794b77b657d4235546cf0a2e4efc58643bc96", 0x13}, {&(0x7f0000001ec0)="2b53b7bf8b39d990f3fe2cda9116228168d37446accbc62139080147f935447a5798c5dccc22556995c4c985410ed900bd19097128ca0067d029aa18520ff05953da0bb2581d34c0db215c1d8a1181a64ce58f83e5451ead9fc3f22c78d0cc4e7027c05cc1197e6aac2c39920f20794dfbdc52ee3eb09febfad6c9810442d30e2af27f4ddf46f4d22334fe067b", 0x8d}, {&(0x7f0000001f80)="076fc63b74b52cd8dc18e063824682f1db0336ce1c7a1d1c58b25234aa5c619378afe9bafd098b06f27086c59fe1a478d56cfb1571646833f8addfc1deb7e20ccda435669644c301f42d88e878fb1b8a7b7cf95f637a001b5a7404990c19f8735d89c798890dc28c27ba4b204752af01d4062fde423df0c99ac40ae350afbde093c0c3b23851aa609ee59861405df5504635edb53dd337655cfdbc53803f2d885a6e4dc910d29730edfcef9e64f1c1a68fe620d51ce24f0bfafdd102442fc161fd6d96b9204f3cdbacacedaa2d0b9d5edddb0ec634192fc36ce95084febc50abc87274b34c7791c924c658ab6b250c5a7e5863f90367f8be0b", 0xf9}, {&(0x7f0000002080)="35b403cbe3ef5afe2d0a49f54b81f1358baae302592dbd3209f7f76ac3989cc70438837cdede024011736bb6cb2640005c8ef6d4d7603f04c4c12f6e2cec7ddb613649e2254967675d730358d048611def4efd86a4cde5f2c9488e23f155f1b9", 0x60}], 0x4, &(0x7f00000022c0)=[@cred={0x20, 0x1, 0x2, r7, r22, r23}, @rights={0x18, 0x1, 0x1, [r1]}], 0x38, 0x4000}, {&(0x7f0000002300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002440)=[{&(0x7f0000002380)="7375c7768b364c463643b591a719ca6f03dce452117800d214923dba68ee6bbdedb4b52d21f3f9e02fdad8867fc1508c05315222ba92fa3b68cc6e304ab94236a8448d4e41d6a1e0268dee4b9ab94426c97488ca8bc404cec9e8b673736f250e57a5efa1b31b62cb2516a79e7c460d5030e8e8b1a37828a5972eb5c51497d186f4a39f3ac45990de", 0x88}], 0x1, &(0x7f0000002480)=[@rights={0x20, 0x1, 0x1, [r5, r4, r2]}], 0x20, 0x48000}, {&(0x7f00000024c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000002540)="69679e9f72ad09ad16fe4abb2a62d61a48f10527db70bab0abe699ae870b5552fa5807b7b794df99d4eae239c92bc97d90c93ba657ff5459d43e66207017cd8d059f381f59d9087ae8e6fd3c5fff99f8d96ef18fd6d9fac9cb440a0cc3954f68c96cd99d210a17ab4b50ad", 0x6b}, {&(0x7f00000025c0)="739d5a7e15733ac7dcb6a0d33a1f08608dc960986688c2b189e7ca911691575f146dd2ce237d8cb08c7aebb5af955de66e1410c8c6b9b8b7a231860bc43ca9c202573d77d10452cc87e46b2e0bf6afe6bda7eb12807e39c3d1e87c4f661852873cea5902de3c", 0x66}], 0x2, 0x0, 0x0, 0x4000000}, {&(0x7f0000002680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003740)=[{&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000003700)="5433736c8cc34e9a48610166a9105ff7ce20f2a83026be47dadc7709e41bdc14e97dbce842ad", 0x26}], 0x2, &(0x7f0000003a40)=[@cred={0x20, 0x1, 0x2, r7, r24, r25}, @rights={0x28, 0x1, 0x1, [r1, r5, r6, r2, r6]}, @cred={0x20, 0x1, 0x2, r7, r26, r27}, @cred={0x20, 0x1, 0x2, r7, r28, r29}], 0x88, 0x40080}, {&(0x7f0000003b00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000003b80)="98649e383c379eaf66474f337449cb7d8f810290da43f0f90ecf8eb88b5247ddd088dfe26c4b00ab66381136c498a7f2c9789d2b856fbad761199085a557b32b9589bbbe30db880e751b652b9fc27e16d3681132b1180126572602613f7759d5ad0a8e8fd3de210469fb93f686d4aba9284e4b98a6e16bf58f9b139a6bb04f7bcf647a0c9c90f55ec9be2ffb29328a2cd5d5c80d11cd2b8c35fe70a1918cf3bf7c38135c2f15e129b5c21c685ae2d1460ad7a44f9fbb133e64eb5c171730ef94ddcd1def00342d3260e49dcd276d8c6b6ea29e1d260491186b", 0xd9}, {&(0x7f0000003c80)="9049688d90047409b41140d55cef3d3fb2be6edb0f4d", 0x16}], 0x2, &(0x7f0000004480)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r30, @ANYRES32=r31, @ANYBLOB="0000000020001200000000000100000001de4cfd1fb3cb60020000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r32, @ANYRES32=r0, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r33, @ANYRES32=r34, @ANYBLOB="000000001000000000000000010000000100000020000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r35, @ANYRES32=r36, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x48c1}], 0x9, 0x8000) 20:48:08 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x0, &(0x7f0000000280)={[{@mode={'mode', 0x3d, 0xffffffff7fffffff}}]}) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="6730b1c2cb08014e17d8bb242c04081ddf6b938178885a0f8528ad34746df36f70bb194f0d064675f966985228233009833026b9c803b8999474a2a8eb656d84c2df324b3a1116569055937c4b6ce0b0a2665286103b73f893753e26a3e4d519326fe67e02191aa14681b5"], &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, &(0x7f0000000280)) 20:48:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:08 executing program 2 (fault-call:12 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1015.835893] input: syz0 as /devices/virtual/input/input199 20:48:08 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000000480), 0xfffffffffffffe40) write$FUSE_OPEN(r0, &(0x7f0000000140)={0x20, 0x0, 0x2, {0x7}}, 0x20) statfs(&(0x7f0000000180)='./file0\x00', 0x0) [ 1015.939225] input: syz0 as /devices/virtual/input/input200 20:48:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f0000000800)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x5b3a1f1b, 0x8001) tgkill(r1, r1, 0x25) r3 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_evm(r2, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@v1={0x2, "681e591d4b"}, 0x6, 0x1) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) 20:48:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30001600", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1016.086752] FAULT_INJECTION: forcing a failure. [ 1016.086752] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1016.098617] CPU: 1 PID: 4740 Comm: syz-executor2 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1016.107124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.116501] Call Trace: [ 1016.119109] dump_stack+0x244/0x39d [ 1016.122775] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1016.127988] ? graph_lock+0x270/0x270 [ 1016.131811] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1016.131838] should_fail.cold.4+0xa/0x17 [ 1016.131859] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1016.131882] ? debug_smp_processor_id+0x1c/0x20 [ 1016.131898] ? perf_trace_lock+0x14d/0x7a0 [ 1016.140744] ? lock_is_held_type+0x210/0x210 [ 1016.140761] ? lock_downgrade+0x900/0x900 [ 1016.140787] ? kasan_check_read+0x11/0x20 [ 1016.140807] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1016.150555] ? graph_lock+0x270/0x270 [ 1016.150572] ? rcu_read_unlock_special+0x370/0x370 [ 1016.150623] ? rcu_read_unlock+0x16/0x60 [ 1016.185915] __alloc_pages_nodemask+0x34b/0xdd0 [ 1016.185952] ? kasan_check_read+0x11/0x20 [ 1016.194766] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 1016.194783] ? rcu_read_unlock_special+0x370/0x370 [ 1016.194841] ? trace_hardirqs_off+0xb8/0x310 [ 1016.194864] cache_grow_begin+0xa5/0x8c0 [ 1016.194887] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1016.204816] ? check_preemption_disabled+0x48/0x280 [ 1016.204842] kmem_cache_alloc+0x66b/0x730 [ 1016.204864] ? kvm_is_reserved_pfn+0x144/0x1b0 [ 1016.204893] mmu_topup_memory_caches+0xfb/0x470 [ 1016.204919] kvm_mmu_load+0x21/0x1290 [ 1016.204944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1016.218929] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1016.226591] input: syz0 as /devices/virtual/input/input201 [ 1016.228080] kvm_arch_vcpu_ioctl_run+0x28ca/0x72b0 [ 1016.228099] ? perf_trace_lock+0x14d/0x7a0 [ 1016.228120] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 1016.228169] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 1016.241204] ? graph_lock+0x270/0x270 [ 1016.257910] ? __lock_acquire+0x62f/0x4c20 [ 1016.257940] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1016.257973] ? find_held_lock+0x36/0x1c0 [ 1016.258000] ? get_task_pid+0x1ea/0x3b0 [ 1016.267166] ? lock_downgrade+0x900/0x900 [ 1016.267184] ? check_preemption_disabled+0x48/0x280 [ 1016.267208] ? kasan_check_read+0x11/0x20 [ 1016.267226] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1016.267244] ? rcu_read_unlock_special+0x370/0x370 [ 1016.267274] ? get_task_pid+0x211/0x3b0 [ 1016.267296] ? find_get_pid+0x270/0x270 [ 1016.298025] ? debug_smp_processor_id+0x1c/0x20 [ 1016.298056] kvm_vcpu_ioctl+0x5c8/0x1150 [ 1016.298073] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 1016.298096] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1016.298120] ? find_held_lock+0x36/0x1c0 [ 1016.307286] ? __fget+0x4aa/0x740 [ 1016.307308] ? check_preemption_disabled+0x48/0x280 [ 1016.307333] ? kasan_check_read+0x11/0x20 [ 1016.307350] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1016.307367] ? rcu_read_unlock_special+0x370/0x370 [ 1016.307395] ? __fget+0x4d1/0x740 [ 1016.307418] ? ksys_dup3+0x680/0x680 [ 1016.316843] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1016.316872] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1016.316891] do_vfs_ioctl+0x1de/0x1790 [ 1016.316916] ? ioctl_preallocate+0x300/0x300 [ 1016.316940] ? __fget_light+0x2e9/0x430 [ 1016.316957] ? fget_raw+0x20/0x20 [ 1016.316979] ? __sb_end_write+0xd9/0x110 [ 1016.325872] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1016.325891] ? fput+0x130/0x1a0 [ 1016.325909] ? do_syscall_64+0x9a/0x820 [ 1016.325933] ? do_syscall_64+0x9a/0x820 [ 1016.325954] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1016.325977] ? security_file_ioctl+0x94/0xc0 [ 1016.334617] ksys_ioctl+0xa9/0xd0 [ 1016.334641] __x64_sys_ioctl+0x73/0xb0 [ 1016.334663] do_syscall_64+0x1b9/0x820 [ 1016.334684] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1016.334706] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1016.334722] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1016.334741] ? trace_hardirqs_on_caller+0x310/0x310 [ 1016.334762] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1016.343050] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1016.343075] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1016.343105] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1016.343118] RIP: 0033:0x457569 [ 1016.343135] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1016.343159] RSP: 002b:00007f2d22974c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1016.352912] RAX: ffffffffffffffda RBX: 00007f2d22974c90 RCX: 0000000000457569 [ 1016.352928] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1016.352938] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1016.352949] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d229756d4 [ 1016.352959] R13: 00000000004c034e R14: 00000000004d0bc0 R15: 0000000000000007 20:48:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="162568b033e75c017e7e58bf37fe0ce0fb87873abdae6cdeaa48bfc2856b52da094c788ea60cc6e8c38fe4c2edb2c34ab095250b89c9513f"], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000780)={0x0, 0x7fff}, &(0x7f00000007c0)=0x8) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000008c0)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={r3, 0x9, 0x10}, &(0x7f0000000800)=0xc) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) [ 1016.598914] input: syz0 as /devices/virtual/input/input202 20:48:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xd}, 0x5}, 0x1c) r1 = syz_open_dev$usb(&(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', 0x5, 0x10000) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000440)) r2 = gettid() r3 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x792, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000002c0)={{0x1, 0x3, 0x0, 0x5, '\x00', 0x26c}, 0x1, 0x30, 0x80000000, r2, 0x4, 0xfff, 'syz1\x00', &(0x7f0000000280)=['em0#\\\x00', 'selinuxem0@\x00', 'net/tcp6\x00', '.5+[[*/security)bdev(\'\x00'], 0x32, [], [0x2c, 0x2, 0x4, 0x55e]}) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r4, &(0x7f0000000080)=0x142, 0xd168) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) lseek(r4, 0x0, 0x2) recvfrom$inet(r6, &(0x7f0000000100)=""/223, 0xdf, 0x10002, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f00000000c0)={0x400, 0x8000, 0x303f}) tkill(r2, 0x1004000000016) 20:48:09 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r5, 0xffffffffffffff7f) io_submit(r4, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r6, 0x81f4}, 0x4a9) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYPTR, @ANYRES32=r1, @ANYPTR=&(0x7f0000000980)=ANY=[@ANYRES64=r6, @ANYRESDEC=r1, @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYPTR64, @ANYPTR64, @ANYRESDEC=0x0, @ANYPTR, @ANYRES64=r1, @ANYPTR64, @ANYRES16=r1], @ANYRESDEC=r6, @ANYRES32=r6, @ANYRESOCT=r7, @ANYRESOCT=r0], @ANYRES32=r2, @ANYRESHEX=r2], 0x5}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r8, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r9 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r10, 0x1) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:09 executing program 2 (fault-call:12 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000000000001f00", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1016.868853] input: syz0 as /devices/virtual/input/input203 [ 1016.881605] FAULT_INJECTION: forcing a failure. [ 1016.881605] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.904083] input: syz0 as /devices/virtual/input/input204 [ 1016.950745] CPU: 1 PID: 4777 Comm: syz-executor2 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1016.959290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.968656] Call Trace: [ 1016.971270] dump_stack+0x244/0x39d [ 1016.974927] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1016.980492] ? debug_smp_processor_id+0x1c/0x20 [ 1016.985190] ? perf_trace_lock+0x14d/0x7a0 [ 1016.989445] should_fail.cold.4+0xa/0x17 [ 1016.993524] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1016.998649] ? save_stack+0xa9/0xd0 [ 1017.002293] ? kasan_kmalloc+0xc7/0xe0 [ 1017.006191] ? kasan_slab_alloc+0x12/0x20 [ 1017.010353] ? kmem_cache_alloc+0x12e/0x730 [ 1017.014690] ? mmu_topup_memory_caches+0xfb/0x470 [ 1017.019543] ? kvm_mmu_load+0x21/0x1290 [ 1017.023531] ? kvm_arch_vcpu_ioctl_run+0x28ca/0x72b0 [ 1017.028652] ? graph_lock+0x270/0x270 [ 1017.032464] ? __x64_sys_ioctl+0x73/0xb0 [ 1017.036542] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1017.041937] ? find_held_lock+0x36/0x1c0 [ 1017.046017] ? __lock_is_held+0xb5/0x140 [ 1017.050110] ? perf_trace_sched_process_exec+0x860/0x860 [ 1017.055600] __should_failslab+0x124/0x180 [ 1017.059855] should_failslab+0x9/0x14 [ 1017.063672] kmem_cache_alloc+0x2be/0x730 [ 1017.067840] ? mmu_topup_memory_caches+0xfb/0x470 [ 1017.072701] mmu_topup_memory_caches+0xfb/0x470 [ 1017.077741] kvm_mmu_load+0x21/0x1290 [ 1017.081559] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1017.087115] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1017.092671] kvm_arch_vcpu_ioctl_run+0x28ca/0x72b0 [ 1017.097614] ? perf_trace_lock+0x14d/0x7a0 [ 1017.101864] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 1017.106140] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 1017.111006] ? graph_lock+0x270/0x270 [ 1017.114822] ? __lock_acquire+0x62f/0x4c20 [ 1017.119071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1017.124641] ? find_held_lock+0x36/0x1c0 [ 1017.128729] ? get_task_pid+0x1ea/0x3b0 [ 1017.132718] ? lock_downgrade+0x900/0x900 [ 1017.136878] ? check_preemption_disabled+0x48/0x280 [ 1017.141911] ? kasan_check_read+0x11/0x20 [ 1017.146081] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1017.151372] ? rcu_read_unlock_special+0x370/0x370 [ 1017.151404] ? get_task_pid+0x211/0x3b0 [ 1017.151420] ? find_get_pid+0x270/0x270 [ 1017.151439] ? debug_smp_processor_id+0x1c/0x20 [ 1017.151468] kvm_vcpu_ioctl+0x5c8/0x1150 [ 1017.151488] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 1017.164356] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1017.164382] ? find_held_lock+0x36/0x1c0 [ 1017.164410] ? __fget+0x4aa/0x740 [ 1017.164429] ? check_preemption_disabled+0x48/0x280 [ 1017.164454] ? kasan_check_read+0x11/0x20 20:48:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x0, 0x152, 0x0, 0x4000036c, 0x10000000000}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78", [[], [], [], [], [], [], [], [], []]}, 0xffffffffffffff23) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r5 = accept4(r4, 0x0, &(0x7f0000000780), 0x4000000000000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r6, 0x1) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000000000001600", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_LSEEK(r2, &(0x7f00000000c0)={0x18, 0x0, 0x1, {0x7}}, 0x18) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r3, &(0x7f0000000080)=0x142, 0x9168) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) [ 1017.164469] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1017.164488] ? rcu_read_unlock_special+0x370/0x370 [ 1017.209991] ? __fget+0x4d1/0x740 [ 1017.213473] ? ksys_dup3+0x680/0x680 [ 1017.217212] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1017.222195] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1017.227931] do_vfs_ioctl+0x1de/0x1790 [ 1017.231845] ? ioctl_preallocate+0x300/0x300 [ 1017.236271] ? __fget_light+0x2e9/0x430 [ 1017.240266] ? fget_raw+0x20/0x20 [ 1017.243747] ? __sb_end_write+0xd9/0x110 [ 1017.247828] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1017.253385] ? fput+0x130/0x1a0 [ 1017.256678] ? do_syscall_64+0x9a/0x820 [ 1017.260666] ? do_syscall_64+0x9a/0x820 [ 1017.264655] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1017.269273] ? security_file_ioctl+0x94/0xc0 [ 1017.273711] ksys_ioctl+0xa9/0xd0 [ 1017.277202] __x64_sys_ioctl+0x73/0xb0 [ 1017.281374] do_syscall_64+0x1b9/0x820 [ 1017.285277] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1017.290658] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1017.295599] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1017.300456] ? trace_hardirqs_on_caller+0x310/0x310 [ 1017.305486] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1017.310517] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1017.315565] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1017.320432] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1017.325632] RIP: 0033:0x457569 [ 1017.328837] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1017.347752] RSP: 002b:00007f2d22974c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1017.355475] RAX: ffffffffffffffda RBX: 00007f2d22974c90 RCX: 0000000000457569 [ 1017.362754] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1017.370066] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1017.377347] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d229756d4 [ 1017.384627] R13: 00000000004c034e R14: 00000000004d0bc0 R15: 0000000000000007 [ 1017.418935] input: syz0 as /devices/virtual/input/input205 20:48:10 executing program 2 (fault-call:12 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080022000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0e920e94832b18307cabe92104000000"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="707b4a92a68e7c30342bf62f9a0d174069f84385bc1930fc77c1047971232ce991bf606a12c9dd1f1fcb47861643cf580e919f7e"], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$unix(r0, &(0x7f00000007c0)="3462cbd6ed5d6240dd76ae3465b7f812992a976faa066ea2456ae3c82d37df96f560eefd336cf9df4a2b7d8fbcd78c58c9e431336f11af8b09b86360be19dbeb4ccf743a5bcde90ee14ba585081822d977f35cabc041ed5d8753", 0x5a, 0x50, &(0x7f0000000840)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x18, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x50, r4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00?\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x4000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r1, 0x10, &(0x7f0000000200)={&(0x7f0000000100)=""/208, 0xd0}}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r3, &(0x7f0000000080)=0x142, 0x9168) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1004000000016) [ 1017.707371] FAULT_INJECTION: forcing a failure. [ 1017.707371] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.748115] CPU: 0 PID: 4809 Comm: syz-executor2 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1017.756663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1017.756671] Call Trace: [ 1017.756698] dump_stack+0x244/0x39d [ 1017.756723] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1017.777484] should_fail.cold.4+0xa/0x17 [ 1017.781565] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1017.786697] ? save_stack+0xa9/0xd0 [ 1017.790342] ? kasan_kmalloc+0xc7/0xe0 [ 1017.794251] ? graph_lock+0x270/0x270 [ 1017.798074] ? __x64_sys_ioctl+0x73/0xb0 [ 1017.802163] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1017.806948] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1017.811555] ? retint_kernel+0x2d/0x2d [ 1017.815467] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1017.820408] ? find_held_lock+0x36/0x1c0 [ 1017.824492] ? __lock_is_held+0xb5/0x140 [ 1017.828594] ? perf_trace_sched_process_exec+0x860/0x860 [ 1017.834064] ? retint_kernel+0x2d/0x2d [ 1017.837980] __should_failslab+0x124/0x180 [ 1017.838002] should_failslab+0x9/0x14 [ 1017.838025] kmem_cache_alloc+0x2be/0x730 [ 1017.850220] ? mmu_topup_memory_caches+0xfb/0x470 [ 1017.855081] mmu_topup_memory_caches+0xfb/0x470 [ 1017.859767] kvm_mmu_load+0x21/0x1290 [ 1017.859789] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1017.859809] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1017.859828] kvm_arch_vcpu_ioctl_run+0x28ca/0x72b0 [ 1017.879625] ? retint_kernel+0x2d/0x2d [ 1017.883528] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1017.888474] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1017.893257] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 1017.898118] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1017.898148] ? retint_kernel+0x2d/0x2d [ 1017.898194] ? lock_release+0x4ea/0xa10 [ 1017.898216] ? get_task_pid+0x1ea/0x3b0 [ 1017.914789] ? lock_downgrade+0x900/0x900 [ 1017.918949] ? check_preemption_disabled+0x48/0x280 [ 1017.919315] input: syz0 as /devices/virtual/input/input206 [ 1017.923978] ? kasan_check_read+0x11/0x20 [ 1017.923996] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1017.924015] ? rcu_read_unlock_special+0x370/0x370 [ 1017.924045] ? get_task_pid+0x211/0x3b0 [ 1017.924061] ? find_get_pid+0x270/0x270 [ 1017.924091] kvm_vcpu_ioctl+0x5c8/0x1150 [ 1017.956032] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 1017.960284] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1017.960310] ? find_held_lock+0x36/0x1c0 [ 1017.960337] ? __fget+0x4aa/0x740 [ 1017.960358] ? check_preemption_disabled+0x48/0x280 [ 1017.978578] ? kasan_check_read+0x11/0x20 [ 1017.982742] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1017.988032] ? rcu_read_unlock_special+0x370/0x370 [ 1017.992987] ? __fget+0x4d1/0x740 [ 1017.996461] ? ksys_dup3+0x680/0x680 [ 1018.000206] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1018.005169] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1018.010899] do_vfs_ioctl+0x1de/0x1790 [ 1018.014809] ? ioctl_preallocate+0x300/0x300 [ 1018.019232] ? __fget_light+0x2e9/0x430 [ 1018.023221] ? fget_raw+0x20/0x20 [ 1018.026693] ? __sb_end_write+0xd9/0x110 [ 1018.030777] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1018.036345] ? fput+0x130/0x1a0 [ 1018.039644] ? do_syscall_64+0x9a/0x820 [ 1018.043633] ? do_syscall_64+0x9a/0x820 [ 1018.047622] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1018.052224] ? security_file_ioctl+0x94/0xc0 [ 1018.056648] ksys_ioctl+0xa9/0xd0 [ 1018.060121] __x64_sys_ioctl+0x73/0xb0 [ 1018.064033] do_syscall_64+0x1b9/0x820 [ 1018.067934] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1018.073317] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1018.078264] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1018.083129] ? trace_hardirqs_on_caller+0x310/0x310 [ 1018.088182] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1018.093219] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1018.098252] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1018.098284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1018.098298] RIP: 0033:0x457569 [ 1018.098316] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1018.098325] RSP: 002b:00007f2d22974c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1018.108362] RAX: ffffffffffffffda RBX: 00007f2d22974c90 RCX: 0000000000457569 20:48:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000000000000000000000000000000000000000cb47ba143fcdaf35c6e47c791f4a75b61c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"], 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) [ 1018.108372] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1018.108382] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1018.108390] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d229756d4 [ 1018.108399] R13: 00000000004c034e R14: 00000000004d0bc0 R15: 0000000000000007 20:48:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aa0801c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000780)={0x0, 0x401}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) [ 1018.228239] input: syz0 as /devices/virtual/input/input207 20:48:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000000200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:11 executing program 2 (fault-call:12 fault-nth:4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:11 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x10a) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f00000000c0)=0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000300)={0x0, 0x0, 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x4}) 20:48:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)="6e17742f00efb651f416cd504d6f58accf42f113562afb4b1d0ccadd3de4a873bc8303920d4549d74f1cda6071812078aa6348221c65902a8f1b76a74d4dcd26748107") sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) [ 1018.442803] input: syz0 as /devices/virtual/input/input208 [ 1018.531586] FAULT_INJECTION: forcing a failure. [ 1018.531586] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.560420] input: syz0 as /devices/virtual/input/input209 20:48:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1018.642255] CPU: 1 PID: 4859 Comm: syz-executor2 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1018.650794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.660162] Call Trace: [ 1018.662771] dump_stack+0x244/0x39d [ 1018.666421] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1018.671646] ? debug_smp_processor_id+0x1c/0x20 [ 1018.676328] ? perf_trace_lock+0x14d/0x7a0 [ 1018.680580] should_fail.cold.4+0xa/0x17 [ 1018.684660] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1018.689791] ? save_stack+0xa9/0xd0 [ 1018.693435] ? kasan_kmalloc+0xc7/0xe0 [ 1018.697334] ? kasan_slab_alloc+0x12/0x20 [ 1018.701490] ? kmem_cache_alloc+0x12e/0x730 [ 1018.701509] ? mmu_topup_memory_caches+0xfb/0x470 [ 1018.701525] ? kvm_mmu_load+0x21/0x1290 [ 1018.701546] ? kvm_arch_vcpu_ioctl_run+0x28ca/0x72b0 [ 1018.715187] ? graph_lock+0x270/0x270 [ 1018.715204] ? __x64_sys_ioctl+0x73/0xb0 [ 1018.715225] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1018.715251] ? find_held_lock+0x36/0x1c0 [ 1018.715272] ? __lock_is_held+0xb5/0x140 [ 1018.741697] ? perf_trace_sched_process_exec+0x860/0x860 [ 1018.741731] __should_failslab+0x124/0x180 [ 1018.741753] should_failslab+0x9/0x14 [ 1018.741773] kmem_cache_alloc+0x2be/0x730 [ 1018.751464] ? kvm_is_reserved_pfn+0x144/0x1b0 [ 1018.751489] ? mmu_topup_memory_caches+0xfb/0x470 [ 1018.751512] mmu_topup_memory_caches+0xfb/0x470 [ 1018.751538] kvm_mmu_load+0x21/0x1290 [ 1018.751560] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1018.751580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 20:48:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f00000000c0)={0x3, 0x2c, 0x1ff, 0x1, 0x3ff, 0x8, 0x1, 0x4, 0x400, 0x40000000000, 0x0, 0x81}) tkill(r1, 0x1004000000016) 20:48:11 executing program 5: r0 = syz_open_dev$midi(0x0, 0x9, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPIN\x00', &(0x7f0000000040)='cgroup\x00', 0x7, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfffffffffffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) [ 1018.759515] kvm_arch_vcpu_ioctl_run+0x28ca/0x72b0 [ 1018.759534] ? perf_trace_lock+0x14d/0x7a0 [ 1018.759553] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 1018.759588] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 1018.759605] ? graph_lock+0x270/0x270 [ 1018.759625] ? __lock_acquire+0x62f/0x4c20 [ 1018.769035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1018.769069] ? find_held_lock+0x36/0x1c0 [ 1018.769098] ? get_task_pid+0x1ea/0x3b0 [ 1018.769117] ? lock_downgrade+0x900/0x900 [ 1018.769138] ? check_preemption_disabled+0x48/0x280 [ 1018.783135] ? kasan_check_read+0x11/0x20 [ 1018.783164] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1018.783184] ? rcu_read_unlock_special+0x370/0x370 [ 1018.783220] ? get_task_pid+0x211/0x3b0 [ 1018.793676] ? find_get_pid+0x270/0x270 [ 1018.793696] ? debug_smp_processor_id+0x1c/0x20 [ 1018.793726] kvm_vcpu_ioctl+0x5c8/0x1150 [ 1018.793741] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 1018.793763] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1018.793786] ? find_held_lock+0x36/0x1c0 [ 1018.802266] ? __fget+0x4aa/0x740 [ 1018.802288] ? check_preemption_disabled+0x48/0x280 [ 1018.802312] ? kasan_check_read+0x11/0x20 [ 1018.802331] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1018.810968] ? rcu_read_unlock_special+0x370/0x370 [ 1018.810998] ? __fget+0x4d1/0x740 [ 1018.811024] ? ksys_dup3+0x680/0x680 [ 1018.811054] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1018.917763] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1018.923484] do_vfs_ioctl+0x1de/0x1790 [ 1018.927387] ? ioctl_preallocate+0x300/0x300 [ 1018.931804] ? __fget_light+0x2e9/0x430 [ 1018.935787] ? fget_raw+0x20/0x20 [ 1018.939254] ? __sb_end_write+0xd9/0x110 [ 1018.943331] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1018.948872] ? fput+0x130/0x1a0 [ 1018.952168] ? do_syscall_64+0x9a/0x820 [ 1018.956148] ? do_syscall_64+0x9a/0x820 [ 1018.960140] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1018.964747] ? security_file_ioctl+0x94/0xc0 [ 1018.969171] ksys_ioctl+0xa9/0xd0 [ 1018.972634] __x64_sys_ioctl+0x73/0xb0 [ 1018.976528] do_syscall_64+0x1b9/0x820 [ 1018.980421] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1018.985791] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1018.990729] ? trace_hardirqs_on_caller+0x310/0x310 [ 1018.995754] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1019.000776] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 1019.007454] ? __switch_to_asm+0x40/0x70 [ 1019.011519] ? __switch_to_asm+0x34/0x70 [ 1019.015593] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1019.020448] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1019.025641] RIP: 0033:0x457569 20:48:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f00000008c0)='/dev/input/mice\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000880)={r0, &(0x7f0000000780)="8175c194b52487c04026e5afb1c7d0e68916995fe84654989ab9ae1f831a8f6f7a3426afd180a7c8e53edc", &(0x7f00000007c0)="03db0f4a9ed992877168844c89c7339f64002d4143c61c086bf0ee9c77795d45a0b92ca5cfca9dc3f70576acf9d5504e1bbf7bd192bbd31f79a9f750ca843866e5e67c70be75451afa27cf05e5c61d55596f04fd70d8fc6fb8d1b1d08c4c5ac16ce0ca6f68fa95c18638c41c3befa4a97c130d704255b166d457115b108c55da5294eabc81e2b008f9d165197ac35cc5774ac15d43d9db1416117dc767deb2ce757fca1e"}, 0x20) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) [ 1019.028839] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1019.047743] RSP: 002b:00007f2d22952c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1019.055459] RAX: ffffffffffffffda RBX: 00007f2d22952c90 RCX: 0000000000457569 [ 1019.062737] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1019.070011] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1019.077279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d229536d4 [ 1019.084551] R13: 00000000004c034e R14: 00000000004d0bc0 R15: 0000000000000007 20:48:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000001100", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1019.226083] input: syz0 as /devices/virtual/input/input210 20:48:12 executing program 2 (fault-call:12 fault-nth:5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:12 executing program 4: gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fec000/0x11000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000540)="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", 0x1000, r0}, 0x68) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x3ce6793d}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r3, @in={{0x2, 0x4e23, @empty}}, 0x5, 0x8001, 0x0, 0x6, 0x80}, 0x98) sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sched_setparam(r1, &(0x7f0000000380)=0x80000001) tkill(r1, 0x1004000000016) ioctl$TIOCSBRK(r2, 0x5427) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) [ 1019.344968] input: syz0 as /devices/virtual/input/input211 [ 1019.486433] FAULT_INJECTION: forcing a failure. [ 1019.486433] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.503208] CPU: 0 PID: 4895 Comm: syz-executor2 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1019.511720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1019.521076] Call Trace: [ 1019.523683] dump_stack+0x244/0x39d [ 1019.527342] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1019.532559] ? should_fail+0x21c/0xd01 [ 1019.536506] should_fail.cold.4+0xa/0x17 [ 1019.540604] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1019.545721] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1019.551185] ? retint_kernel+0x1b/0x2d [ 1019.555076] ? trace_hardirqs_on+0x310/0x310 [ 1019.559489] ? save_stack+0xa9/0xd0 [ 1019.563142] ? graph_lock+0x270/0x270 [ 1019.566970] ? find_held_lock+0x36/0x1c0 [ 1019.571038] ? __lock_is_held+0xb5/0x140 [ 1019.575105] ? perf_trace_sched_process_exec+0x860/0x860 [ 1019.580558] __should_failslab+0x124/0x180 [ 1019.584808] should_failslab+0x9/0x14 [ 1019.588603] kmem_cache_alloc+0x2be/0x730 [ 1019.592771] ? mmu_topup_memory_caches+0xfb/0x470 [ 1019.597622] mmu_topup_memory_caches+0xfb/0x470 [ 1019.602286] kvm_mmu_load+0x21/0x1290 [ 1019.606090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1019.611623] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1019.617173] kvm_arch_vcpu_ioctl_run+0x28ca/0x72b0 [ 1019.622107] ? perf_trace_lock+0x14d/0x7a0 [ 1019.626344] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 1019.630605] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 1019.635465] ? graph_lock+0x270/0x270 [ 1019.639532] ? mark_held_locks+0xc7/0x130 [ 1019.643705] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1019.648304] ? retint_kernel+0x2d/0x2d [ 1019.652218] ? find_held_lock+0x36/0x1c0 [ 1019.656310] ? get_task_pid+0x1ea/0x3b0 [ 1019.660298] ? lock_downgrade+0x900/0x900 [ 1019.664455] ? check_preemption_disabled+0x48/0x280 [ 1019.664484] ? kasan_check_read+0x11/0x20 [ 1019.664500] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1019.664517] ? rcu_read_unlock_special+0x370/0x370 20:48:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1019.664544] ? get_task_pid+0x211/0x3b0 [ 1019.687834] ? find_get_pid+0x270/0x270 [ 1019.691827] ? debug_smp_processor_id+0x1c/0x20 [ 1019.696555] kvm_vcpu_ioctl+0x5c8/0x1150 [ 1019.700631] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 1019.704887] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1019.710632] ? find_held_lock+0x36/0x1c0 [ 1019.714718] ? __fget+0x4aa/0x740 [ 1019.718266] ? check_preemption_disabled+0x48/0x280 [ 1019.723308] ? kasan_check_read+0x11/0x20 [ 1019.727469] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1019.732761] ? rcu_read_unlock_special+0x370/0x370 [ 1019.737719] ? __fget+0x4d1/0x740 [ 1019.741205] ? ksys_dup3+0x680/0x680 [ 1019.744942] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1019.749902] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1019.755631] do_vfs_ioctl+0x1de/0x1790 [ 1019.759544] ? ioctl_preallocate+0x300/0x300 [ 1019.763968] ? __fget_light+0x2e9/0x430 [ 1019.768004] ? fget_raw+0x20/0x20 [ 1019.771524] ? __sb_end_write+0xd9/0x110 [ 1019.775598] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1019.781125] ? fput+0x130/0x1a0 [ 1019.784403] ? do_syscall_64+0x9a/0x820 [ 1019.788373] ? do_syscall_64+0x9a/0x820 [ 1019.792349] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1019.796967] ? security_file_ioctl+0x94/0xc0 [ 1019.801391] ksys_ioctl+0xa9/0xd0 [ 1019.804873] __x64_sys_ioctl+0x73/0xb0 [ 1019.808766] do_syscall_64+0x1b9/0x820 [ 1019.812645] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1019.817998] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1019.822941] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1019.827788] ? trace_hardirqs_on_caller+0x310/0x310 [ 1019.832812] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1019.837820] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1019.842659] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1019.847835] RIP: 0033:0x457569 [ 1019.851017] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1019.869913] RSP: 002b:00007f2d22974c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1019.877878] RAX: ffffffffffffffda RBX: 00007f2d22974c90 RCX: 0000000000457569 20:48:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0xffd6) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:12 executing program 5: close(0xffffffffffffffff) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x1132}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000080)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'vlan0\x00', 0x400}) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) [ 1019.885139] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1019.892402] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1019.899668] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d229756d4 [ 1019.906950] R13: 00000000004c034e R14: 00000000004d0bc0 R15: 0000000000000007 20:48:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000001500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:13 executing program 2 (fault-call:12 fault-nth:6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1020.052181] input: syz0 as /devices/virtual/input/input212 [ 1020.124899] input: syz0 as /devices/virtual/input/input213 20:48:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xfff, 0x20000) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x0, 0x200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x0, 0x805, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000fc2000), 0x391, 0x3, 0x0, 0xffffffffffffffee) r5 = socket(0x15, 0x80005, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x3, @mcast1, 0x101}}, 0xbc86, 0xffff, 0x9, "a4333e0279a345b0402827622ea3b90b540027af38b39e76edf38e480552f7a43cfa9ded67bcf723c8e7886e2ebd1e0b3882ce1fe4db12d58451708b5fb4c8069d68b2eebedff0fdcfaadb0fc3afb075"}, 0xd8) getsockopt(r5, 0x114, 0x2715, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x24) r6 = openat$cgroup_ro(r2, 0x0, 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000015340)={&(0x7f0000014d00)=@can, 0x80, &(0x7f0000014e40)}, 0x0) dup(0xffffffffffffff9c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffffffffffffffd, 0x0, @remote, 0x5}, 0x1c) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r7 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000004c0)) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/t[p6\x00') sendfile(r0, r8, &(0x7f0000000080)=0x142, 0x9168) r9 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r9, r0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x8, {{0xa, 0x4e22, 0x1, @empty, 0x200}}}, 0x88) flistxattr(r3, &(0x7f0000000500)=""/102, 0x66) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f0000000340)=0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r7, 0x1004000000016) 20:48:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30001100", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1020.249233] FAULT_INJECTION: forcing a failure. [ 1020.249233] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.334685] CPU: 1 PID: 4921 Comm: syz-executor2 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1020.343233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.352589] Call Trace: [ 1020.352616] dump_stack+0x244/0x39d [ 1020.352643] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1020.352668] ? debug_smp_processor_id+0x1c/0x20 [ 1020.352690] ? perf_trace_lock+0x14d/0x7a0 [ 1020.352718] should_fail.cold.4+0xa/0x17 [ 1020.377033] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1020.382206] ? save_stack+0xa9/0xd0 [ 1020.385840] ? kasan_kmalloc+0xc7/0xe0 [ 1020.389734] ? kasan_slab_alloc+0x12/0x20 [ 1020.393890] ? kmem_cache_alloc+0x12e/0x730 [ 1020.398226] ? mmu_topup_memory_caches+0xfb/0x470 [ 1020.403079] ? kvm_mmu_load+0x21/0x1290 [ 1020.407061] ? kvm_arch_vcpu_ioctl_run+0x28ca/0x72b0 [ 1020.412179] ? graph_lock+0x270/0x270 [ 1020.416009] ? __x64_sys_ioctl+0x73/0xb0 [ 1020.420083] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1020.425490] ? find_held_lock+0x36/0x1c0 [ 1020.429570] ? __lock_is_held+0xb5/0x140 [ 1020.433661] ? perf_trace_sched_process_exec+0x860/0x860 [ 1020.439134] __should_failslab+0x124/0x180 [ 1020.443392] should_failslab+0x9/0x14 [ 1020.447205] kmem_cache_alloc+0x2be/0x730 [ 1020.451375] ? mmu_topup_memory_caches+0xfb/0x470 [ 1020.456233] mmu_topup_memory_caches+0xfb/0x470 [ 1020.460917] kvm_mmu_load+0x21/0x1290 [ 1020.464735] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.470285] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.475833] kvm_arch_vcpu_ioctl_run+0x28ca/0x72b0 [ 1020.480773] ? perf_trace_lock+0x14d/0x7a0 [ 1020.485051] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 1020.489311] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 1020.494168] ? graph_lock+0x270/0x270 [ 1020.497982] ? __lock_acquire+0x62f/0x4c20 [ 1020.502268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.507828] ? find_held_lock+0x36/0x1c0 [ 1020.511910] ? get_task_pid+0x1ea/0x3b0 [ 1020.515899] ? lock_downgrade+0x900/0x900 [ 1020.520070] ? check_preemption_disabled+0x48/0x280 [ 1020.525141] ? kasan_check_read+0x11/0x20 [ 1020.529305] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1020.534604] ? rcu_read_unlock_special+0x370/0x370 [ 1020.539554] ? get_task_pid+0x211/0x3b0 [ 1020.543539] ? find_get_pid+0x270/0x270 [ 1020.547521] ? debug_smp_processor_id+0x1c/0x20 [ 1020.552210] kvm_vcpu_ioctl+0x5c8/0x1150 [ 1020.556279] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 1020.560527] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1020.566253] ? find_held_lock+0x36/0x1c0 [ 1020.570330] ? __fget+0x4aa/0x740 [ 1020.573834] ? check_preemption_disabled+0x48/0x280 [ 1020.578874] ? kasan_check_read+0x11/0x20 [ 1020.583147] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1020.588456] ? rcu_read_unlock_special+0x370/0x370 [ 1020.593408] ? __fget+0x4d1/0x740 [ 1020.596879] ? ksys_dup3+0x680/0x680 [ 1020.600650] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1020.605601] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1020.611325] do_vfs_ioctl+0x1de/0x1790 [ 1020.615234] ? ioctl_preallocate+0x300/0x300 [ 1020.619656] ? __fget_light+0x2e9/0x430 [ 1020.623637] ? fget_raw+0x20/0x20 [ 1020.627105] ? __sb_end_write+0xd9/0x110 [ 1020.631195] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1020.636739] ? fput+0x130/0x1a0 [ 1020.640030] ? do_syscall_64+0x9a/0x820 [ 1020.644015] ? do_syscall_64+0x9a/0x820 [ 1020.648002] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1020.652605] ? security_file_ioctl+0x94/0xc0 [ 1020.657029] ksys_ioctl+0xa9/0xd0 [ 1020.660501] __x64_sys_ioctl+0x73/0xb0 [ 1020.664434] do_syscall_64+0x1b9/0x820 [ 1020.668351] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1020.673723] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1020.678659] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1020.683511] ? trace_hardirqs_on_caller+0x310/0x310 [ 1020.688540] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1020.693573] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1020.698433] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1020.703626] RIP: 0033:0x457569 [ 1020.706826] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1020.726256] RSP: 002b:00007f2d22974c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 20:48:13 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x20, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000080)="087e6842429a79fac6176ef49e1290bd3aeae0c2b1df0678fd546a8cff5957d6c77cb47bbeefe272", &(0x7f0000000140)="bb959c151a151587a7fb1ffd2d43fd9d95e02b3f9df365ec73ce329a8bbf7c2d88932bb7c7981ab09ea49bb0910964c686d69a94a6f6a3b9c5abb0da9641a99c60cf70f1ddceebc98e273b47f5af44242e777ef1fac7aeae70149c82482174f57551e7ce7d26ac8c5f8b4f663396c14468741949a91f2be4ef6395953833ddd1958d22614245bd241e0806d75d8bca6e366b712c63bcee520bdcd993d207318fe77004ec6d4f99e3ae0ade4d6c01185958a3285b0ba970f45a95", 0x3}, 0x20) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xfffffff, 0x0, 0x0, [], 0x0}) 20:48:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000008000052010000000000000000000000000000c200000000000000cb47ba3f772e36fd1a4fe501b362b0ae780000000000000000000000"], 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2fe46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1fa1e114c07ccd191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e1770000000000000000b9102f6802ee707c2cb3f0045d4a27e0df87ca72bfc9e63175b7e97aacc330bfcc27a088fa658f9b7ce55a6ce528"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1020.733973] RAX: ffffffffffffffda RBX: 00007f2d22974c90 RCX: 0000000000457569 [ 1020.741250] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1020.748524] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1020.755797] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d229756d4 [ 1020.763083] R13: 00000000004c034e R14: 00000000004d0bc0 R15: 0000000000000007 [ 1020.864287] input: syz0 as /devices/virtual/input/input214 20:48:13 executing program 2 (fault-call:12 fault-nth:7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1020.973284] input: syz0 as /devices/virtual/input/input215 20:48:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f00000000c0)='ns/cgroup\x00'}, 0x30) r3 = syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/cgroup\x00') ioctl$VT_RELDISP(r3, 0xb701) 20:48:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x84800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000240)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @tid=r2}, &(0x7f00000004c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r3, &(0x7f0000000080)=0x142, 0x9168) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r4, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0xf, @sdr={0x3031334d, 0x7}}) tkill(r2, 0x1004000000016) 20:48:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30001400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd700100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000780), &(0x7f00000007c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) [ 1021.268129] FAULT_INJECTION: forcing a failure. [ 1021.268129] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.289580] CPU: 0 PID: 4951 Comm: syz-executor2 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1021.298088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.307451] Call Trace: [ 1021.310056] dump_stack+0x244/0x39d [ 1021.313711] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1021.318916] should_fail.cold.4+0xa/0x17 [ 1021.322972] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1021.328066] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1021.332846] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1021.332880] ? save_stack+0xa9/0xd0 [ 1021.332915] ? kasan_kmalloc+0xc7/0xe0 [ 1021.332942] ? kasan_slab_alloc+0x12/0x20 [ 1021.342134] ? kmem_cache_alloc+0x12e/0x730 [ 1021.342168] ? graph_lock+0x270/0x270 [ 1021.342189] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1021.350214] ? retint_kernel+0x2d/0x2d [ 1021.350241] ? __lock_is_held+0xb5/0x140 [ 1021.350275] ? perf_trace_sched_process_exec+0x860/0x860 [ 1021.358382] __should_failslab+0x124/0x180 [ 1021.358405] should_failslab+0x9/0x14 [ 1021.358422] kmem_cache_alloc+0x2be/0x730 [ 1021.367070] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1021.367090] ? mmu_topup_memory_caches+0xfb/0x470 [ 1021.367113] mmu_topup_memory_caches+0xfb/0x470 [ 1021.367139] kvm_mmu_load+0x21/0x1290 [ 1021.367173] ? kvm_arch_vcpu_ioctl_run+0x28c2/0x72b0 [ 1021.376674] kvm_arch_vcpu_ioctl_run+0x28ca/0x72b0 [ 1021.376691] ? perf_trace_lock+0x14d/0x7a0 [ 1021.376710] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 1021.376743] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 1021.382374] input: syz0 as /devices/virtual/input/input216 [ 1021.384760] ? graph_lock+0x270/0x270 [ 1021.384779] ? __lock_acquire+0x62f/0x4c20 [ 1021.384799] ? print_usage_bug+0xc0/0xc0 [ 1021.384841] ? find_held_lock+0x36/0x1c0 [ 1021.384866] ? get_task_pid+0x1ea/0x3b0 [ 1021.393792] ? lock_downgrade+0x900/0x900 [ 1021.393810] ? check_preemption_disabled+0x48/0x280 20:48:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f0000000840)='fou\x00') epoll_pwait(r0, &(0x7f0000000780)=[{}], 0x1, 0x1, &(0x7f00000007c0)={0xff}, 0x8) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000000c0)={0xa, 0x1, 0x100000000, 0x1}, 0xa) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) ioctl$TIOCLINUX7(r4, 0x541c, &(0x7f0000000800)={0x7, 0x1}) [ 1021.393835] ? kasan_check_read+0x11/0x20 [ 1021.393852] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1021.393869] ? rcu_read_unlock_special+0x370/0x370 [ 1021.393897] ? get_task_pid+0x211/0x3b0 [ 1021.439965] ? find_get_pid+0x270/0x270 [ 1021.439986] ? debug_smp_processor_id+0x1c/0x20 [ 1021.440015] kvm_vcpu_ioctl+0x5c8/0x1150 [ 1021.440034] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 1021.448325] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1021.448344] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1021.448368] ? find_held_lock+0x36/0x1c0 [ 1021.448394] ? __fget+0x4aa/0x740 [ 1021.518941] ? check_preemption_disabled+0x48/0x280 [ 1021.523972] ? kasan_check_read+0x11/0x20 [ 1021.523990] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1021.524008] ? rcu_read_unlock_special+0x370/0x370 [ 1021.524025] ? __fget+0x431/0x740 [ 1021.524044] ? __fget+0x43f/0x740 [ 1021.533476] ? __fget+0x4d1/0x740 [ 1021.533501] ? ksys_dup3+0x680/0x680 [ 1021.533528] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1021.557423] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1021.563168] do_vfs_ioctl+0x1de/0x1790 [ 1021.567091] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1021.571863] ? ioctl_preallocate+0x300/0x300 [ 1021.576300] ? __fget_light+0x2e9/0x430 [ 1021.580485] ? fget_raw+0x20/0x20 [ 1021.580509] ? __sb_end_write+0xd9/0x110 [ 1021.580540] ? do_syscall_64+0x9a/0x820 [ 1021.592015] ? do_syscall_64+0x9a/0x820 [ 1021.596006] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1021.600609] ? security_file_ioctl+0x94/0xc0 [ 1021.605031] ksys_ioctl+0xa9/0xd0 [ 1021.608527] __x64_sys_ioctl+0x73/0xb0 [ 1021.612436] do_syscall_64+0x1b9/0x820 [ 1021.616349] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1021.621726] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1021.626682] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1021.631537] ? trace_hardirqs_on_caller+0x310/0x310 [ 1021.636566] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1021.641597] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1021.641625] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1021.641643] RIP: 0033:0x457569 20:48:14 executing program 5: socketpair(0x1e, 0x2, 0x0, &(0x7f000000aff8)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r1}) [ 1021.654866] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1021.673776] RSP: 002b:00007f2d22974c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1021.681494] RAX: ffffffffffffffda RBX: 00007f2d22974c90 RCX: 0000000000457569 [ 1021.688768] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1021.696040] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1021.703311] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d229756d4 [ 1021.703321] R13: 00000000004c034e R14: 00000000004d0bc0 R15: 0000000000000007 20:48:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, &(0x7f00000002c0)=0xe00, 0x1000007ffff000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f00000007c0)={0x1, &(0x7f0000000780)=[{0x0, 0x0, 0x0, @dev}]}) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1021.808122] input: syz0 as /devices/virtual/input/input217 20:48:14 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/snapshot\x00', 0x200, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0}, &(0x7f0000000740)=0x14, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0x4, &(0x7f0000000600)=@raw=[@call={0x85, 0x0, 0x0, 0x59}, @map={0x18, 0xf, 0x1, 0x0, r0}, @ldst={0x3, 0x0, 0x6, 0x1, 0x7, 0xfffffffffffffff8}], &(0x7f0000000640)='syzkaller\x00', 0x55, 0x41, &(0x7f0000000680)=""/65, 0x41100, 0x1, [], r1, 0xa}, 0x48) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x20000, 0x0) recvfrom$inet(r2, &(0x7f0000000380)=""/117, 0x75, 0x0, &(0x7f0000000400)={0x2, 0x4e23, @broadcast}, 0x10) r3 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{}]}) clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4c4, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x677, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x100}, r4, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000004c0)=""/239) exit(0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) 20:48:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f0000000200)="09b546742a65e54895f1e50bbe74df3b7fcafbb403ce60902f0e93340c7a80b6d0f7a3feaceb7f4901962a6c8525b3f28b8e39ea248d959026634aa6f7bab1d5a63319824a02c082134cd08383d956f3a3c323c7279bf7a474a55742ffb2") syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') prctl$PR_GET_TSC(0x19, &(0x7f0000000180)) nanosleep(&(0x7f0000000100), &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x8001, 0x20002) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x4) tkill(r1, 0x1004000000016) 20:48:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000001f00", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1022.176238] input: syz0 as /devices/virtual/input/input218 [ 1022.230514] input: syz0 as /devices/virtual/input/input219 20:48:15 executing program 2 (fault-call:12 fault-nth:8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:15 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000780)='/dev/userio\x00', 0x80080, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/video37\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x0, 0x4) r3 = open(&(0x7f0000000800)='./file0\x00', 0x240000, 0x98) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$radio(&(0x7f0000000840)='/dev/radio#\x00', 0x0, 0x2) ppoll(&(0x7f0000000880)=[{r0, 0x400}, {r1, 0x4002}, {r2, 0x2000}, {r3, 0x4}, {r4, 0x1000}, {r5}], 0x6, &(0x7f00000008c0)={0x77359400}, &(0x7f0000000900)={0x7}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000380)={r8, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r6, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r7, 0x4) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r9, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r9, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r6, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r10 = accept4(r7, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r11, 0x1) sendmsg$key(r10, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x2a, @local, 0x8000}, 0x1c) sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, &(0x7f0000000100)=0x80000000) 20:48:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30001500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1022.464336] input: syz0 as /devices/virtual/input/input220 [ 1022.498986] input: syz0 as /devices/virtual/input/input221 20:48:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000000000001000", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) ioctl$KVM_ASSIGN_PCI_DEVICE(r4, 0x8040ae69, &(0x7f00000000c0)={0x6, 0x2, 0xffffffffffffffff, 0x1, 0xffffffffffffffff}) 20:48:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1022.733989] input: syz0 as /devices/virtual/input/input222 20:48:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) [ 1022.892843] input: syz0 as /devices/virtual/input/input223 [ 1022.927731] FAULT_INJECTION: forcing a failure. [ 1022.927731] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.986045] CPU: 1 PID: 5045 Comm: syz-executor2 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1022.994578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.003943] Call Trace: [ 1023.006548] dump_stack+0x244/0x39d [ 1023.010209] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1023.015468] ? debug_smp_processor_id+0x1c/0x20 [ 1023.020192] ? perf_trace_lock+0x14d/0x7a0 [ 1023.024450] should_fail.cold.4+0xa/0x17 [ 1023.028533] ? fault_create_debugfs_attr+0x1f0/0x1f0 20:48:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000000000001400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1023.034349] ? save_stack+0xa9/0xd0 [ 1023.037989] ? kasan_kmalloc+0xc7/0xe0 [ 1023.041884] ? kasan_slab_alloc+0x12/0x20 [ 1023.046082] ? kmem_cache_alloc+0x12e/0x730 [ 1023.050433] ? mmu_topup_memory_caches+0xfb/0x470 [ 1023.055288] ? kvm_mmu_load+0x21/0x1290 [ 1023.059272] ? kvm_arch_vcpu_ioctl_run+0x28ca/0x72b0 [ 1023.064390] ? graph_lock+0x270/0x270 [ 1023.068211] ? __x64_sys_ioctl+0x73/0xb0 [ 1023.068233] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1023.068261] ? find_held_lock+0x36/0x1c0 [ 1023.068284] ? __lock_is_held+0xb5/0x140 [ 1023.068316] ? perf_trace_sched_process_exec+0x860/0x860 [ 1023.077739] __should_failslab+0x124/0x180 [ 1023.077763] should_failslab+0x9/0x14 [ 1023.077779] kmem_cache_alloc+0x2be/0x730 [ 1023.077807] ? kvm_is_reserved_pfn+0x144/0x1b0 [ 1023.108053] ? mmu_topup_memory_caches+0xfb/0x470 [ 1023.112935] mmu_topup_memory_caches+0xfb/0x470 [ 1023.117628] kvm_mmu_load+0x21/0x1290 [ 1023.121432] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1023.126980] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1023.132522] kvm_arch_vcpu_ioctl_run+0x28ca/0x72b0 [ 1023.137453] ? perf_trace_lock+0x14d/0x7a0 [ 1023.141731] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 1023.146019] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 1023.150865] ? graph_lock+0x270/0x270 [ 1023.154671] ? __lock_acquire+0x62f/0x4c20 [ 1023.158907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1023.164461] ? find_held_lock+0x36/0x1c0 [ 1023.168538] ? get_task_pid+0x1ea/0x3b0 [ 1023.172514] ? lock_downgrade+0x900/0x900 [ 1023.176664] ? check_preemption_disabled+0x48/0x280 [ 1023.181691] ? kasan_check_read+0x11/0x20 [ 1023.185842] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1023.191146] ? rcu_read_unlock_special+0x370/0x370 [ 1023.196100] ? get_task_pid+0x211/0x3b0 [ 1023.200081] ? find_get_pid+0x270/0x270 [ 1023.204060] ? debug_smp_processor_id+0x1c/0x20 [ 1023.208760] kvm_vcpu_ioctl+0x5c8/0x1150 [ 1023.212820] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 1023.217059] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1023.222776] ? find_held_lock+0x36/0x1c0 [ 1023.226848] ? __fget+0x4aa/0x740 [ 1023.230306] ? check_preemption_disabled+0x48/0x280 [ 1023.235331] ? kasan_check_read+0x11/0x20 [ 1023.239482] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1023.244763] ? rcu_read_unlock_special+0x370/0x370 [ 1023.249718] ? __fget+0x4d1/0x740 [ 1023.253187] ? ksys_dup3+0x680/0x680 [ 1023.256920] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1023.261897] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1023.267615] do_vfs_ioctl+0x1de/0x1790 [ 1023.271517] ? ioctl_preallocate+0x300/0x300 [ 1023.275934] ? __fget_light+0x2e9/0x430 [ 1023.279913] ? fget_raw+0x20/0x20 [ 1023.283381] ? __sb_end_write+0xd9/0x110 [ 1023.287456] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1023.293013] ? fput+0x130/0x1a0 [ 1023.296297] ? do_syscall_64+0x9a/0x820 [ 1023.300291] ? do_syscall_64+0x9a/0x820 [ 1023.304285] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1023.308878] ? security_file_ioctl+0x94/0xc0 [ 1023.313294] ksys_ioctl+0xa9/0xd0 [ 1023.316757] __x64_sys_ioctl+0x73/0xb0 [ 1023.320647] do_syscall_64+0x1b9/0x820 [ 1023.324538] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1023.329909] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1023.334854] ? trace_hardirqs_on_caller+0x310/0x310 [ 1023.339872] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1023.344891] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 1023.351611] ? __switch_to_asm+0x40/0x70 [ 1023.355690] ? __switch_to_asm+0x34/0x70 [ 1023.359768] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1023.364624] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1023.369811] RIP: 0033:0x457569 [ 1023.373007] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1023.391904] RSP: 002b:00007f2d22952c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1023.399617] RAX: ffffffffffffffda RBX: 00007f2d22952c90 RCX: 0000000000457569 [ 1023.406885] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1023.414160] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1023.421428] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d229536d4 [ 1023.428699] R13: 00000000004c034e R14: 00000000004d0bc0 R15: 0000000000000007 [ 1023.440412] input: syz0 as /devices/virtual/input/input224 20:48:16 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/snapshot\x00', 0x200, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0}, &(0x7f0000000740)=0x14, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0x4, &(0x7f0000000600)=@raw=[@call={0x85, 0x0, 0x0, 0x59}, @map={0x18, 0xf, 0x1, 0x0, r0}, @ldst={0x3, 0x0, 0x6, 0x1, 0x7, 0xfffffffffffffff8}], &(0x7f0000000640)='syzkaller\x00', 0x55, 0x41, &(0x7f0000000680)=""/65, 0x41100, 0x1, [], r1, 0xa}, 0x48) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x20000, 0x0) recvfrom$inet(r2, &(0x7f0000000380)=""/117, 0x75, 0x0, &(0x7f0000000400)={0x2, 0x4e23, @broadcast}, 0x10) r3 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{}]}) clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4c4, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x677, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x100}, r4, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000004c0)=""/239) exit(0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) [ 1023.532080] input: syz0 as /devices/virtual/input/input225 20:48:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0xfffffffffffffffe, &(0x7f0000000500)={0x0, 0x12, 0x2000000, @thr={&(0x7f0000000100)="d2e1fd80fe214bc741e9c7ec3ae77a12988d020891dbd66c0d5c479362f6bbbc574d5a64d0132e74216a", &(0x7f0000000140)="83d24de48020a1f708435630"}}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x3278, 0x2e, 0x408, 0x70bd26, 0x25dfdbfc, {0x14}, [@nested={0x18, 0x95, [@typed={0x14, 0x16, @ipv6=@loopback}]}, @nested={0x20cc, 0x6e, [@generic="d73f00d4d2a5c348ceb4870ebb24979a8d1adb391f9a827f7b3cf5fc06be7e2cf7aa70ef0b2b5914d22b4a4be65b1e68004dd1b363d1ce309b195c8fd59569598a636f2f36095283434999e6d736f80a5345ac1f3874975814901194b94d3a369018a558ff58d358dc1cb676a1cc9d13f8f4f422d70331237067dd9afceb0bfd9614f38115915f16c692308845", @generic="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", @typed={0x30, 0xf, @binary="7ce34725446bcd09b62b39213a490b61597692177503899c9594acb344cbac388127bf562296c1b7f9caa482"}, @generic="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", @generic="cdb5", @typed={0x8, 0x8a, @fd=r0}]}, @generic="5444a9da905d1336637e890629d3157d4c84aa47be818323dda4ff3aa52edd323220e9d7510df146f7559ce7cebdb5fd90fd1601860fc39e0435112e98ce9394dd09727674f7cfa97fd22385598cbed5ded02257594a903a3f1ef3ad4d6725265c8ba4527a538fca2c9b797a748d3a3d0f94483dd54b54cae48f79f66271c173cab216badedaad668a23e83280f2fc9cd126b8c4d15ff17cb133bf830d99f8a4", @nested={0xcc, 0x12, [@generic="02d1839f0970d3cdbafc1a5fdbb56efb2f6f597dff4b6d5c3f7a57377262a7d1c1e89ebd64de9050364c70c8d7360fe35187e0462fa62fe891a320dcfdaedbbcce8b0ea11505efe8469996fd24a81b586306768bf757079fdca151d32cb00752310d631213f0e8a1064b81cdf40bcbd79f11dd7cb898d4d77bb64c80419e90de18b7e457f86aca02fbd6dbd1dfd84f452c3552e6fd3fdc9872d22396378fe42f3b61c8122faa40a41f33e7e471194d33b7a6ce84d2", @typed={0x8, 0x3c, @fd=r2}, @typed={0x8, 0x12, @u32=0x8}]}, @generic="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", @typed={0x14, 0xc, @ipv6=@remote}]}, 0x3278}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000000c0)={0x1, 0x400}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) 20:48:16 executing program 2 (fault-call:12 fault-nth:9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000000000000200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1023.847499] input: syz0 as /devices/virtual/input/input226 [ 1023.939060] input: syz0 as /devices/virtual/input/input227 [ 1023.940567] FAULT_INJECTION: forcing a failure. [ 1023.940567] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1023.956529] CPU: 0 PID: 5069 Comm: syz-executor2 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1023.965023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.965030] Call Trace: [ 1023.965053] dump_stack+0x244/0x39d [ 1023.965076] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1023.965097] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1023.965124] should_fail.cold.4+0xa/0x17 [ 1023.965146] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1023.980776] ? debug_smp_processor_id+0x1c/0x20 [ 1023.994761] ? perf_trace_lock+0x14d/0x7a0 [ 1023.994789] ? lock_is_held_type+0x210/0x210 [ 1023.994805] ? lock_downgrade+0x900/0x900 [ 1023.994831] ? kasan_check_read+0x11/0x20 [ 1023.994847] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1023.994867] ? graph_lock+0x270/0x270 [ 1024.030584] ? rcu_read_unlock_special+0x370/0x370 [ 1024.035595] ? rcu_read_unlock+0x16/0x60 [ 1024.036096] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 1024.039675] __alloc_pages_nodemask+0x34b/0xdd0 [ 1024.039697] ? kasan_check_read+0x11/0x20 [ 1024.039718] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 1024.039733] ? rcu_read_unlock_special+0x370/0x370 [ 1024.039788] ? trace_hardirqs_off+0xb8/0x310 [ 1024.072882] cache_grow_begin+0xa5/0x8c0 [ 1024.072903] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1024.072922] ? check_preemption_disabled+0x48/0x280 [ 1024.072945] kmem_cache_alloc+0x66b/0x730 [ 1024.072976] mmu_topup_memory_caches+0xfb/0x470 [ 1024.096403] kvm_mmu_load+0x21/0x1290 [ 1024.096425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1024.096453] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1024.096474] kvm_arch_vcpu_ioctl_run+0x28ca/0x72b0 [ 1024.096491] ? perf_trace_lock+0x14d/0x7a0 [ 1024.096513] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 1024.105862] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 1024.116314] ? graph_lock+0x270/0x270 [ 1024.116332] ? __lock_acquire+0x62f/0x4c20 [ 1024.116357] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1024.129666] ? find_held_lock+0x36/0x1c0 [ 1024.129696] ? get_task_pid+0x1ea/0x3b0 [ 1024.129716] ? lock_downgrade+0x900/0x900 [ 1024.143259] ? check_preemption_disabled+0x48/0x280 [ 1024.143286] ? kasan_check_read+0x11/0x20 [ 1024.143303] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1024.143321] ? rcu_read_unlock_special+0x370/0x370 [ 1024.143349] ? get_task_pid+0x211/0x3b0 [ 1024.174868] ? find_get_pid+0x270/0x270 [ 1024.174887] ? debug_smp_processor_id+0x1c/0x20 [ 1024.174916] kvm_vcpu_ioctl+0x5c8/0x1150 [ 1024.174931] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 1024.174954] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1024.174984] ? find_held_lock+0x36/0x1c0 [ 1024.182939] ? __fget+0x4aa/0x740 [ 1024.195887] ? check_preemption_disabled+0x48/0x280 [ 1024.195913] ? kasan_check_read+0x11/0x20 [ 1024.195929] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1024.195947] ? rcu_read_unlock_special+0x370/0x370 [ 1024.195976] ? __fget+0x4d1/0x740 [ 1024.195999] ? ksys_dup3+0x680/0x680 [ 1024.218362] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1024.218391] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 1024.218409] do_vfs_ioctl+0x1de/0x1790 [ 1024.218439] ? ioctl_preallocate+0x300/0x300 [ 1024.228623] ? __fget_light+0x2e9/0x430 [ 1024.228642] ? fget_raw+0x20/0x20 [ 1024.228665] ? __sb_end_write+0xd9/0x110 [ 1024.228688] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1024.228711] ? fput+0x130/0x1a0 [ 1024.235866] ? do_syscall_64+0x9a/0x820 [ 1024.235884] ? do_syscall_64+0x9a/0x820 [ 1024.235918] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1024.235955] ? security_file_ioctl+0x94/0xc0 [ 1024.235976] ksys_ioctl+0xa9/0xd0 [ 1024.235997] __x64_sys_ioctl+0x73/0xb0 [ 1024.236017] do_syscall_64+0x1b9/0x820 [ 1024.246703] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1024.246725] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1024.246742] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1024.246763] ? trace_hardirqs_on_caller+0x310/0x310 [ 1024.246782] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1024.246802] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1024.246825] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1024.255124] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1024.255139] RIP: 0033:0x457569 [ 1024.255167] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1024.255177] RSP: 002b:00007f2d22974c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1024.255193] RAX: ffffffffffffffda RBX: 00007f2d22974c90 RCX: 0000000000457569 [ 1024.255202] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 20:48:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0x0, 0x20000006, &(0x7f0000b63fe4)={0xa, 0x8000000002, 0x0, @empty={[0x3100]}}, 0x1c) r3 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x1000, "fce994e7d4cff1592f772bb2df46af400408f900d85f97ae607098a9dbbca58357e6e4578bdfa762c18f3719abc1fbe579e8457c315278c558f2b9e695dcb3fd0fe5493519931be75946fd8fec1bd53e60239fddd5a916eaadf24e83afc8209ecbbf79e20c8e4a6edfb90a9d552ac6d74efab52a1d1d99331cae8f4f614c26d42d31b64d628b388220d678777ce4bf09325cc3c792f23538c72216131a6e40810c0a3843ee4dc5d29417cb86a9f5299f4a728fcab731d5854063f491cf61e50adae991b3db1ed5eb74ea38c51bd68e915ae9d57ae3ea60de3698dde23391b097726e3d7c5e53bc64be47f8c00e8e1f72e59c631994c866fb20f939def018cf8dddef699dfb27e5123b5b40fba30b8c84c120180c66c5cab808dde7404e628fd0b4f97d4be8a7dcbd5becd023f941f03b449c4f5970d488c68ea67e9aae41fa2ec34a7dd29e9394bd837d10c1ec6c3a3ec87e1bb4a745f7d7d6ac52d96880eddc6fef0a0fe1c116658390a05962fc3521b624171c0a679af4dfd314a07aee5eddea4bdd985bed1204b972e2f172be05247f29d6fab0a5bf146d029cc21412a79cf848ef7b8b6f856ec2e3b88be093826bbbc71f10225c9999f92b4b1c30c82a32ef85fb8c0ac4fbfebca0c21ff06639e1c7b4cd8e902e672767ba23a38c42d50aec31438e8713321ab10718d129ef864cdb164afa84f7fdf46c9311e672af842775b0fa3d17538d1675f4d8b851a5abff63fc2e7258d18648a30656195df069d8c45cd9c3cf519775221cdede652658d0869d2d1941b44c7316775faeb162c2c517879583197552c83bc1e6bdd3fb754d3791d5b3dbe2e3266f57e5d559c1e936275c65f084989f274f015e322017c1f2e469f0e36f787077d51b3a7c1607808d089b7ba2fbb1ca5b8316edc06275d4d8c630c70fead3b36bf6725878cd25bc1509c95fef8ecb8d195a6a9189dde95107bf9826c525a15932611166675401314e2a35a92b9e6ccb785304c9a047f7a0792ca4b019aaa4f717ac4cf0246b173b66137e023019c8b187fee031a0874c4b0866b0f8d581bc4bf93dc81b32406a7192571459384749ca920b371abadb9b4ecf99057ab26eecd9cd796985a81937af86e9f4b009912ebcfb32dccb71f0eb81c4c299d6bcad2f2fcd0d00ff126f16beca3fc31a8c6cfe180aba0e386e3dd1d5a8617aa02a4c7f7173c175a0d7d6a388533ca12fd0dac1f51f81af5388e1e646ab573f69cbb64e51a7043642ad94b0e875eb61b5d88a4b36cc64a63f33bd0642c42958f4ec778478590102b19b015ca49722430365a27f9137e8073445e408648493257e063585a364c5ad44fa0acbc6c1f7caa807863c07dcc2016ac8648922e8734251b4933860aa4c67a5438fa5d48ac40a3d0b07bda8b08a8f3d62e2703bba8fea78b2d6d9dc1e899aa245b22fe84450562b8344062b0eddf553fcc6c3d52c5976247b94e1e3c4be56544a8305ce3e54949285766aea966e3c88760f5219773bb6824038f85624b5558058b4c5f56ef506285ed0e04ae1d525d22801f5639ae189be9e836af2849ecbf5aa1dc2f84b595cb7b77ed995e7679a2df27c81a2eb4f6a1488a161099825d8c9b0794abf0a073002381c4dc374c4e315a7d4ec806e13197bf68cd6bf4d44c454f19680cc594bbfdb0d62c94cb41be7bf859776a9dc29f8f7de4886a6008ecddc8e07ce3e8be1f915029fd5acf26523df6412cbbdaa2ae7ad1780f7b3ddf8fc7d81cfe4172a83efe54d655e94e4c0392707b9637e9abb8c1928dfba289f23e2070b889e864583eed9067d64f237891b247f2f0436a8dc771b51259d398c1f435da8fdf811006202a2c3e85f5a36c887f79b41237efae204ad3d296d8197e25e60f48e4ab82df53de79c09e97f5404e6f508a400cd5c1eeddbaa1b1cd988a9f15812927388baae3bc106e84efdfebcb886d0466c919150d40e26a457a60f50ed4346292c088ce0ff74a5b65e5c3b75f14ab99bfa0f81a4deedb0674c1bd174c3f585bd92b7c0322ea5e7f5a4e1795c7c3292c26b292dd4ecea288dd33d0e29bbbf95281fc9e67e59c8d29f3da628b0e156be744d7a96cb4ac4cb51f17cb129a7d07314fa41a90ce0bf3863b6c3178337303b8712a9408277db5cd2deb895e772d528645efba1debef1bba770f211a75828ec13ec23196a01f40f8c20c8b7e5cd162e4af5c52d73847ea28d2c7afb8e8a0cc23220e08442b4b635fc490aa79e6ecb874116ae43052010b4fad21e0c2620c14265c90548176df0bd75e50809efa62ca8378d441eb24a7120b0472bb77efdee1ed568a0e130d3b756e8cb12bb55110309d514aae626e35985908fed154cd964529943a343436340ac9d0c821291f54afe7e91690588cd3dbe90b22ef0f646ebf77b212c9849f0cd2952e7297f4551275054bab6828a8ca3680122baa4a956ad3b17cb0b195092e16a34a9d6cc007991cf08335882c7cd82e119156541943e4fa560956855c287d74c0e220307dcd729c6bc536bf5ff5e853d261e92d37da6f76c9e0e3b2599d69c3a424e7180de84e62fbb52780412800493e438132edac43228f9089fef14209cff99400972f80c0bdca6494b647328011c94902ecbe0c57685eabfb169cf1e48ef6f237242ef2e2c4ae1eb0e8937f0736d22671d912513265bad6d362195cd9b96bde9d44afadba6ec16e76802e3d2969fb64202da434cac452c540f8debd32083f21227d074accdf29d527098812aff49961d6086f987fdefff4cee87f3637758db6a3ad8e24f597e6a03dbdbd30bf6b5774fe6e638cb216ebce64c075799b348c0a8320b92ec9dd7682058ec19c53898c890e44bbd4a332dca18b5fd61b47dea2e34e6da048ac40d3717569a83686fccf1f09b5f840e6aeb32e58140e1e9861211632dbb8e3d3c208c68f4b97e61a83c77e876216235425a7d35e9434ed74c558461ea3cd6ab3847233ab1accfd458ffb65d588caa284892ee5089cedc4f85d3fa4c26153db6eedae4e6608f27c1daf0606134199a171a40370405798a2c00008eea1e025f3b417150729aa9a6147028c338e562d4079dd80cf76cabb69a0892e9c0e9a0490ed4ed5bda9714adfb881a56111f4df036ef32bca39b880671e8742f9e26502d252f347d446aa0d16484289f0621b8d6d06d2fe60ae40cae8b61de818a0a3bf73cd4f78267cc73eab11e44d8adbd7ee4f63f371a0c649b4f5971d6a54ba375410849b1bf331d3dca9e730e9c5c25dc21f0823f2e64b0a08b5092c1b41b70e1b1ac5ebfa6e8680bcc85528835cc08d6123b7954ec9881454c60ccdce64db4779bf4044b8ed6b7b011d1b9656aeaa27f7b255099dd8c907434a7216721ba653464d3ee04e65a45892c618cabf28d1fa4bc34228ce91f0bf966c4fb1c3ed1e2139d8147d592af0917fa8ec0e439a118f9c791643b79f062afca42140a69ccaadd6fe0e44421575cdfd3b8b79c22178bca66bf94beac0d446733f6ebf83ec8530e7c1c80d01dcb2cd2797adf0adb4d304c635480dda2b365006e6dfb421273501c937cbc84164f0dc8df442b182184654d88a481004c92f5b7460a341157ff7d322bb2e9dd8a8ba4e5c54ea308f306d19cfc3ff748feadba10a141f64e78d634072b7a6fec43093f84ab82060a119a01a8acd21a1ba5f3f0bfa480ce123068d79ac3b013e17544849b0a85f8946dca9972c2ce22ce6343d319648ebbe79950c5a70a3f3288b1332713dda3731257bd1aea43cebe21ea679a2773b3739d0f2049aee1f955aff5ddd9895b0e017305b5f34548e0dbc50b7cf257ef46e4454523deeea500d887762b9c32842242ca67c2595406b772d294aa25382e598bb2e8492dc980549a78a40d9c6c280de64b5a72e1ee26965db8d52244b7fe797a6ef4fa508f87a5c6d14f3d5d0c15de95bf7af7d625233154c97c82fbc363e7d714d80b24ae5c5c92dddbe4a7a3b3cf258a22764d6e681ae4a5802513aa57aec3d3a61a56ffc12c74748c694e8c75266a95549a8e0bd899a956f72715ed0f0d6187941cd5f9e581c99d837266da70c3c4a6c0eee7bc9103e72dedd9dfd3f47c5b9de01040db7a0c80e20280819db7d89d5843bf2de6988c7f61ec61d3b2647065272ec79fcb96a18d6509527367acc53ba96917f75bea5a4e4147772326ea27ebe7c1b92d8f394d2b699bc32c0329a8ac4f2fe8a25914f69ab51306a0d1d9a68a6384cdf7bd27f4bb592dda34529abb047e3f08ede9fda3e18498b0060330242a251d3c867f6f6d6cf067de3a3f45bf5db3100df31820ece040c1b1ed274e29e9ff8c24d5450508767620d962cf7b1a84fa2c64d68b6ef11b3eea204bda9a9ec763527685c98be9ea0270acf78d2436b99f21d767b954420a1628f269bdf971687c09a5b62287951ec0a505f0f4323a25830cf96a5d9e6781152f792aade5a5d41ca63d20126e7ae071b992bfa52298844fa3b1ac3d1a72547f8fbc9123dfad26152e78c659610779c26a2ce57f346b7a77c130704b9db0bd3358fa1218e87bd86c1141b2ba0cfd3cc385cb122eabe2bc58b25a2cef5e5c1c8fad6edc9192e48f45a0f58fad98477e4be83a1a7d754cb8e1219eb73a8ce615a5c0c801a7060e58149e88b6cfe25252d6627139621132972fdb1181ce5f4b32776c5a3629852a04a3d6eefb9818f973576b5ee3714a90f350c1e579dbfc78da0a214611912807cc6d43592d56df096ac04c878c73e780e921d63464ab60e8a1c025b563f6069ea5ae997166ee5e1a13595385fe7f9c8f30e274dfcbda54dc5e9b42a1c853dc094efe8e31a8c7ba30445df9d61ddd7c0b30f692f4ab892c531f6197cd3d1653e66c2b6af9b16e6a8ee6e1e8de49064949437bafbd849ff30b5d71ea8019f58c96f30f93972955cc674d40a5bed583dbac22985af8fd43bdf42b2a9c649f07aa07809c69f236a7fbde3e1e0f2f0c9369303dd304cddb273917a86bacbcec7feddb73e6a9c06a4edc1a4c1ff83330ae6d41b7c22c95e4a02930939a4e8598248afc1958e908a0bb1c8bb5ce3a985e5fd23179348b7947108fb3af865d0b2fbc17d4f4781eb8a3a1d0b8d108e55599ac4c2d860b7531422bfac08d0270528abc9712a6075e5cb4d418ccd8099e60f4a9b56452b5bb8d8987da3f5ad50a40ad4da8858ebc074a24d1e2ca527f74a470446d60037b6264bc16b8d56f2f7d45b1b77b446f836d17be367316568f0e8e5a624d0d858d02d1b305b174a50fd4529b4277b1c64c2166e00b3512cb0376da754c2fb219ff08fdf5c8bd4e7d7dbacf6bba28afc8c8d57b0a6cbd9e66e5bc5c09c2a02e57234e15305019505dcedba152eb418f456b4ccb273d2eb2da1397923b21ea685235161a0c07ff994da41a0a4b182a45aec803de50f09e66f4186660b343064655cbb315f7fe18381a623c1629f044617719291b26e0570dfe97c17889a509d0b61617d6f32f88e65e92d0e7fc9fbaa54124942c00257e4d97ef74aab49cef2f418118e02b141f4b434463d48a7ad4ba0728a4b726a2814e97c634eeb2f8de9bd650a281252149bdd573c68635984c39ce47d490bb9c1f2295bbb709b99938656645b7d1c21e1e15d77c4572856101f2bb1efe69c01220c5cef995d2d137d1a7943a2bec4034e893ae0da43f2e52557eb1a730b0c4aff802ac7754d7ace8c658a65bbc810536c0ddfffdb2f9725da80c5ac11d00849bdf003246ad24a79b35840bf529d06b1b488c23c493b187c7b8dd77e5cc4070d96f4cdaf263ef8d27"}, &(0x7f0000000000)=0x1024) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_ATTR(r3, &(0x7f0000000040)={0x78}, 0x78) 20:48:17 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x4280, 0x40) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1, 0x10) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="66baf80cb85c54cf86ef66bafc0cedf768ba676566660f38807ab966440fe2642e5ec4617d50d52e460f01d1c4a23146ac3b5c000000400f21f4c4a1ade20b460f01c9", 0x43}], 0x1, 0x2, &(0x7f0000000180)=[@efer={0x2, 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4018aebd, &(0x7f0000000280)={0x0, 0x0, @ioapic}) [ 1024.255217] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1024.275465] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d229756d4 [ 1024.275475] R13: 00000000004c034e R14: 00000000004d0bc0 R15: 0000000000000007 20:48:17 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000400)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r3, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f00000000c0)={0x8, 0x3, 0x1}) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat(r2, &(0x7f0000000780)='./file0\x00', 0x80000, 0x41) listen(r2, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e771c36fd1a4fe501b362b0ae78"], 0x4a) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) write$binfmt_script(r4, &(0x7f0000000900)={'#! ', './file0', [{0x20, "65746830ef6b657972696e675d766d6e657431766d6e65743176626f786e6574312f6d643573756d267d5b2776626f786e657431"}, {0x20, 'fou\x00'}, {0x20, 'selinuxppp1vboxnet1'}], 0xa, "7cf1f305321a1a4835e1f9d16dd5f11cb019068eb01bf932a2af0b4824822789e9704b8bb07593a0c3d485bab06c7c88e0400b86b18b466de8f9de048d0acef40e9e83303c383f51622d7327f65d008db7534d08e65f10a650883b04a05d99384be1e5a8a2485090c7d813b54a4bcd1e0eef97286a41eb4438"}, 0xd2) r5 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r6, 0x1) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e17777"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000000000000500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1024.605265] input: syz0 as /devices/virtual/input/input228 [ 1024.632317] input: syz0 as /devices/virtual/input/input229 20:48:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000000100", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1024.864082] input: syz0 as /devices/virtual/input/input230 20:48:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x2000000000000005, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe921040da57eb44674b1be32e349b205bb93551feb9002758dbe2e92ceb649de"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000440)={0x6}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152, 0x6}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="16f9bce57a8342280c2bf28660c3734535dade88c7000000991c6408248bf44500440481d3bc4f8818962f6836eeab57dbc89dbfb558c51034fe0bf8a3d8406f"], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000006c0)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) accept4$llc(r0, 0x0, &(0x7f00000007c0), 0x80800) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0200000000a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0xffe, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) [ 1024.977111] input: syz0 as /devices/virtual/input/input231 20:48:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000001600", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) fstat(r1, &(0x7f0000000780)) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000005201000000000000000000000000000000000000000000c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"], 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x4082) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:48:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080), 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) 20:48:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae1b, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1026.822838] input: syz0 as /devices/virtual/input/input232 [ 1026.843975] binder: BINDER_SET_CONTEXT_MGR already set [ 1026.875498] binder: 5122:5133 ioctl 40046207 0 returned -16 [ 1026.894830] input: syz0 as /devices/virtual/input/input233 [ 1026.905860] binder_alloc: 5122: binder_alloc_buf, no vma [ 1026.917418] binder: 5122:5140 transaction failed 29189/-3, size 0-0 line 2973 20:48:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00/\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x2000000000000005, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe921040da57eb44674b1be32e349b205bb93551feb9002758dbe2e92ceb649de"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000440)={0x6}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152, 0x6}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="16f9bce57a8342280c2bf28660c3734535dade88c7000000991c6408248bf44500440481d3bc4f8818962f6836eeab57dbc89dbfb558c51034fe0bf8a3d8406f"], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000006c0)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) accept4$llc(r0, 0x0, &(0x7f00000007c0), 0x80800) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0200000000a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0xffe, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) [ 1027.031241] binder: release 5122:5133 transaction 16 in, still active [ 1027.038694] binder: send failed reply for transaction 16 to 5122:5133 [ 1027.050239] input: syz0 as /devices/virtual/input/input234 [ 1027.078028] binder: undelivered TRANSACTION_ERROR: 29189 [ 1027.100931] input: syz0 as /devices/virtual/input/input235 [ 1027.111413] binder: undelivered TRANSACTION_COMPLETE 20:48:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) listen(r0, 0xec) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) [ 1027.137987] binder: undelivered TRANSACTION_ERROR: 29189 20:48:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) modify_ldt$read(0x0, &(0x7f0000000780)=""/141, 0x8d) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000000000000300", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:20 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) dup2(r2, r0) ftruncate(r1, 0x2) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x8, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x2000}]) [ 1027.496126] input: syz0 as /devices/virtual/input/input236 [ 1027.551233] audit: type=1804 audit(1544129300.554:45): pid=5171 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir605014024/syzkaller.RpXifK/1089/bus" dev="sda1" ino=16970 res=1 20:48:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r4, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r0, r2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f00000000c0)={0x103000, 0x100000}) tkill(r1, 0x1004000000016) [ 1027.651336] input: syz0 as /devices/virtual/input/input237 20:48:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1027.681395] audit: type=1804 audit(1544129300.574:46): pid=5171 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir605014024/syzkaller.RpXifK/1089/bus" dev="sda1" ino=16970 res=1 [ 1027.710572] audit: type=1804 audit(1544129300.574:47): pid=5177 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir605014024/syzkaller.RpXifK/1089/bus" dev="sda1" ino=16970 res=1 20:48:20 executing program 5: getpid() r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000007640)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000280)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x8) r3 = getpid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0x2000}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640), 0x0, &(0x7f0000000940)=[@cred={0x20}, @rights={0x20, 0x1, 0x1, [r0, r0, r2]}, @rights={0x28, 0x1, 0x1, [r4, r4, r4, r0, 0xffffffffffffffff]}], 0x68, 0x40814}, 0x4080) close(r2) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) getpgid(r3) timerfd_create(0x0, 0x800) socket(0x40000000015, 0x805, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={&(0x7f0000000080), 0x3dd, &(0x7f0000007000)={&(0x7f0000000000)={0x18, 0x2e, 0x1000000007ffff, 0x0, 0x0, {0x3}}, 0x18}}, 0x0) [ 1027.735376] audit: type=1804 audit(1544129300.604:48): pid=5171 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir605014024/syzkaller.RpXifK/1089/bus" dev="sda1" ino=16970 res=1 20:48:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00\x00\x00/\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae5e, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1027.948724] input: syz0 as /devices/virtual/input/input238 [ 1028.012722] input: syz0 as /devices/virtual/input/input239 20:48:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000000400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00002bbd70000000000001000000e9ff0500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1f0cacc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe9cd206a92f42957477e6e85aeb9437c2104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="1f65"], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecd139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361c742c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae58, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1028.350836] input: syz0 as /devices/virtual/input/input240 20:48:21 executing program 5: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[::0:/ullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101000, 0x40) [ 1028.458489] input: syz0 as /devices/virtual/input/input241 20:48:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000780)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000001500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1028.577125] libceph: parse_ips bad ip '[::0' [ 1028.584195] libceph: parse_ips bad ip '[::0' 20:48:21 executing program 5: r0 = eventfd(0x9) fsetxattr$security_ima(r0, &(0x7f0000000100)='security.ima\x00', &(0x7f00000001c0)=@md5={0x1, "246717aec9cc1ec354c8966d5b09b49b"}, 0x11, 0x3) r1 = creat(&(0x7f0000000500)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f00000012c0)=ANY=[]) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8)=0x3301c, 0x0) getuid() removexattr(&(0x7f0000000400)='./bus\x00', &(0x7f00000004c0)=@known='trusted.overlay.nlink\x00') fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000380)='trusted.overlay.upper\x00', &(0x7f0000000640)={0x0, 0xfb, 0x86, 0x1, 0xfffffffeffffffff, "80c5272f3b814a67b4f0f5cd7b4c2ed2", "eae940cfc7ed3afe1593b0061caa7207e1d3aed9a9e8aecfd581a0cea4c888e69f1a22e934759ec68d937b93e53699d78d2493b27f116e5db2254d98c554e326fbde7ea4d96a8038c7e137fc199d3ec434dc2134d9cd5c52352b790c31a771012fd4631e6c6eb7700f7de9d13589022ebc"}, 0x86, 0x1) fstatfs(r1, &(0x7f0000000580)=""/152) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000200)=0xc) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x3ff}) sendfile(r1, r4, &(0x7f0000d83ff8)=0x2400, 0x8000fffffffe) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045505, &(0x7f0000000280)) [ 1028.720657] input: syz0 as /devices/virtual/input/input242 20:48:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0xbc7, 0x3}) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2f696f202b70696473202b0b5cf72240743a437520"], 0x15) tkill(r1, 0x1004000000016) 20:48:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1028.829354] overlayfs: missing 'lowerdir' [ 1028.835772] input: syz0 as /devices/virtual/input/input243 [ 1028.900837] audit: type=1804 audit(1544129301.904:49): pid=5245 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir605014024/syzkaller.RpXifK/1092/bus" dev="sda1" ino=16955 res=1 20:48:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae2c, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = semget$private(0x0, 0x0, 0x10) semctl$IPC_RMID(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r3, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d01b6f32e36fd1a4fe501b362b0ae78"], 0x4a) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r5 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) syz_open_dev$video(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'nr0\x00', 0x100}) tkill(r6, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x101000, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0241788574c5331cdeb5aeb90ce95361ed0000006adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425013985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) [ 1029.057704] audit: type=1804 audit(1544129301.954:50): pid=5258 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir605014024/syzkaller.RpXifK/1092/bus" dev="sda1" ino=16955 res=1 20:48:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)=0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)=0x0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x400000, 0x0) sched_getscheduler(0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r6 = socket(0x840000000002, 0x3, 0xff) r7 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x9, 0x100) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) poll(&(0x7f0000000140)=[{r4}, {r4, 0x100}, {r6, 0x400}, {}, {r4, 0xc}, {r4}, {r6, 0x2000}], 0x7, 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") getpid() clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESDEC=r8, @ANYRESDEC=r6, @ANYRESOCT=r2, @ANYRESOCT=r0, @ANYBLOB="077ab9c1da062a65ae4a52aa13db192827c6", @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRESHEX=r5, @ANYRES64=r0, @ANYRES32=r3, @ANYRESOCT=r5, @ANYPTR64, @ANYRES16=r1]]], 0x1) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x350) setuid(r10) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000180)={0x14, 0xd, 0xb, 0x3, 0x9, 0x9ef, 0x5, 0x0, 0x1}) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') ioctl$sock_inet_SIOCGIFADDR(r11, 0x8915, &(0x7f00000000c0)={'yam0\x00', {0x2, 0x4e21, @remote}}) sendfile(r0, r11, &(0x7f0000000080)=0x142, 0x9168) r12 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r12, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) [ 1029.152966] input: syz0 as /devices/virtual/input/input244 [ 1029.202408] input: syz0 as /devices/virtual/input/input245 20:48:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) 20:48:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000000000001100", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1029.451401] audit: type=1804 audit(1544129302.454:51): pid=5258 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir605014024/syzkaller.RpXifK/1092/bus" dev="sda1" ino=16955 res=1 [ 1029.509000] overlayfs: missing 'lowerdir' 20:48:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae17, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1029.566798] input: syz0 as /devices/virtual/input/input246 20:48:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000780)={0x20}, 0x4) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) [ 1029.620265] audit: type=1804 audit(1544129302.484:52): pid=5245 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir605014024/syzkaller.RpXifK/1092/bus" dev="sda1" ino=16955 res=1 20:48:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1029.701957] input: syz0 as /devices/virtual/input/input247 [ 1029.710350] audit: type=1804 audit(1544129302.544:53): pid=5245 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir605014024/syzkaller.RpXifK/1092/bus" dev="sda1" ino=16955 res=1 20:48:22 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x6, 0x300) r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), 0x7}, 0xffffffffffffff13) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) 20:48:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000001200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1029.892791] audit: type=1804 audit(1544129302.544:54): pid=5261 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir605014024/syzkaller.RpXifK/1092/bus" dev="sda1" ino=16955 res=1 20:48:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r1}) tkill(r1, 0x1004000000016) [ 1030.027225] input: syz0 as /devices/virtual/input/input248 20:48:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae70, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1030.106384] input: syz0 as /devices/virtual/input/input249 20:48:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000bc0)='127.0.0.1\x00', &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='9p\x00', 0x40, &(0x7f0000000c80)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@version_9p2000='version=9p2000'}, {@aname={'aname', 0x3d, 'syz0\x00'}}, {@privport='privport'}, {@cache_fscache='cache=fscache'}, {@version_u='version=9p2000.u'}], [{@fsuuid={'fsuuid', 0x3d, {[0x77, 0x3b, 0x0, 0x63, 0x30, 0x66], 0x2d, [0x65, 0x36, 0x37, 0x79], 0x2d, [0x77, 0x32, 0x77, 0x31], 0x2d, [0x33, 0x37, 0x65, 0x75], 0x2d, [0x77, 0x3a, 0x76, 0x77, 0x36, 0x39, 0x62, 0x79]}}}, {@permit_directio='permit_directio'}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@smackfsroot={'smackfsroot', 0x3d, 'syz1\x00'}}, {@subj_user={'subj_user'}}]}}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) io_setup(0xc707, &(0x7f0000000840)=0x0) io_getevents(r3, 0x8, 0x4, &(0x7f0000000880)=[{}, {}, {}, {}], &(0x7f0000000900)) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000780), &(0x7f00000007c0)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000ac0)={'mangle\x00', 0x7c, "e146c0ce2546ffacd90012f9dafef47f8b9ed66e84a21f5c82776e781794d5bbaa7759e68b69eaa880b076b613548cef7132b0ca3f25e7a50534e2faabbe4b8bd7dad38b7b2d73406c382a30ea9f663127a3eb2472a45f3d01571ad7a51864cbc92c87bb50c06a06148e633f6bd3ab16ae4f36cb9becee22428a2685"}, &(0x7f0000000b80)=0xa0) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000800)={r2, 0x9}, 0x8) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r5, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="7aa95fb8e7ea34e5e90410436b9c5ac2720681769205a3544141f8902f58c80edc597eeadec2fd8f9a20a011cbf1c96c86", 0x31}, {&(0x7f0000000980)="f06e1eff624ff8ff742d0bef3934c25e39f423d04a417c649740ca88115870636430b064e2beb7a1f3c93be4184e729f", 0x30}, {&(0x7f00000009c0)="60859f8ac131e09203320e3610ad67014cde92d0c32ba4939a2c2d8e1614a3716023cdf5155610143ff0ab03e61faa122a561fe27feb3bec32c4bb49f501007f5811f0dfe75f6e4ff63c5ba1c7fab2b34e596807418319f9d6d29ce10a34342b1aac42d28ced63eb96", 0x69}], 0x3}, 0x1ff}], 0x1, 0x4) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r6, 0x1) sendmsg$key(r0, &(0x7f0000000d80)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xfffffffffffffd94}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000001600", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1030.364027] input: syz0 as /devices/virtual/input/input250 20:48:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000000c0)={{0x1, 0x0, 0x7fff, 0x3, 0x2}, 0x9, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0x1, 0x1, 0x44f, 0x7f}) tkill(r1, 0x1004000000016) [ 1030.425465] input: syz0 as /devices/virtual/input/input251 20:48:23 executing program 5: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1f}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e23, 0xc066, @mcast2, 0x400}}, 0x6, 0x916, 0x400, 0x0, 0x92}, &(0x7f0000000140)=0x98) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000240)={0xffffffffffffff01, 0x4, 0x5a, 0x2, 0xfffffffffffff800, 0x80000000}) 20:48:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30001000", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae2d, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffffe}) getsockname$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000300)=0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_getres(0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x1ebd) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5e3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f000075cf53), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) mmap(&(0x7f00000f2000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x0) waitid(0x0, r0, &(0x7f00000002c0), 0x1060000004, 0x0) iopl(0xa500) getpid() ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, r1}, {0x0, 0x9}}, &(0x7f0000040000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:boot_t:s0\x00', 0x1c, 0x2) lsetxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.ima\x00', &(0x7f0000000380)=@v2={0x5, 0x3, 0x2, 0x5, 0xed, "ab6762b7a6ab2288fc0add5eaa64120bf0bf89bd59701983d50e8a089fa63790c93030b1db1869762447026911527e6c9dcd1bc2d2e8dbacc593e6567237aff355c49fd456b3250a924e1143754be7254aa0a170c6ee49ca47f53c00434d68f7fc882bcc11ae1e37c74b68850b62b61aef8d5c4e8bff6b1221dad80dc8cfd510695a7c05e77e8565c22b7171277e9497bb67828fcdbd3b1f4843754a55d51d2a7422e92cd7e1b70dbc78aad5392059e7a7f792ed56e4107209a3075c26fcee29dc808cacd9584edd84e1a325661368b069f8ae39e51ea61dec839ecacc80c1904f3db5deb1d56ca80dec0c66d6"}, 0xf7, 0x3) fcntl$getownex(r2, 0x10, &(0x7f0000000480)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x8200007fff9, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) tkill(r0, 0x1000000000016) dup3(r4, r5, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x80000001) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r6, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") socket$inet6(0xa, 0x1000000000005, 0x0) 20:48:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = socket$inet(0x2, 0x6, 0x60000000000) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)={0x8, [0x8, 0x5, 0x3, 0x4, 0x1f, 0x0, 0x30000000000, 0x7]}, 0x14) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r0, r3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCLINUX2(r4, 0x541c, &(0x7f0000000140)={0x2, 0x100000000, 0xdd, 0x0, 0x7f, 0x3}) tkill(r1, 0x1004000000016) [ 1030.801809] input: syz0 as /devices/virtual/input/input252 [ 1030.947144] input: syz0 as /devices/virtual/input/input253 20:48:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000001200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae7d, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1031.223819] input: syz0 as /devices/virtual/input/input254 20:48:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf13900000d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) [ 1031.289748] input: syz0 as /devices/virtual/input/input255 20:48:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000001f00", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000500080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f47415e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, r5, r6) r7 = semget(0x2, 0x4, 0x100) semctl$SEM_INFO(r7, 0x4, 0x13, &(0x7f0000000800)=""/4096) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000007c0)={0xa, &(0x7f0000000780)=[{0x79, 0x80000000}, {0x1ff, 0x9}, {0x2}, {0x5, 0x7}, {0xfffffffffffffff9, 0x7}, {0x3, 0xffffffffffff7fff}, {0x8, 0x3}, {0x5, 0x8001}, {0x4, 0x6}, {0xfff, 0x100}]}) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a1cec870e177"], 0xa2}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 20:48:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x100000000000000) write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "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", 0x1000}, 0x130f) write$UHID_INPUT(r2, &(0x7f00000019c0)={0x8, "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", 0x1000}, 0x1006) write$UHID_INPUT(r1, &(0x7f0000002a00)={0x8, "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", 0x1000}, 0x1006) 20:48:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae1a, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1031.575172] input: syz0 as /devices/virtual/input/input256 [ 1031.632618] input: syz0 as /devices/virtual/input/input257 20:48:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) tkill(r1, 0x1004000000016) 20:48:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00/\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:24 executing program 5: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$unix(r1, &(0x7f00000018c0)={&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001840)=[{&(0x7f00000004c0)="f905dc4e41a2e901b07fdfa1436d9ed029fe53dd1f9e68f52167617613dcd4dcb0b2e717d0e185ae7d954664a9d8b9c5c04b29b9ac9ef0dd4e0432adac0ce020a623e02cb80df2eafc410075c1f11f9342262a36902910659e925619d918bd49e9e567f321371d01f4ba1011a94316b7a67ce7791847b1ec6a93e132d1c948e8f35562a5fa5b1b94e6e2f93d", 0x8c}, {&(0x7f0000000580)="25c9284f880c890974a662374fcf76855c6eb540d4cbb037d1", 0x19}, {&(0x7f00000005c0)="435a9ad3afabdc61c5be9038e414334bfbfc369ef8137a66dd2db8357aea881166bc8d5787e1d90ffebc467a36a23a90516ef928f9f9413f3a0037564924f52f4b91a9643a7341ae0523", 0x4a}, {&(0x7f0000000640)="f9a49b6f5724fc7aef3bc02ce9a9165a38d2a674dbd9b095012fb9c1bcf6e3ef50a5004ff0905e5b11299e3e5881bfd95abc682a9c7626b49d027fb1b0cdd51d9fdbbf0f8802dc379fc9582b024bc44961747001070273c463728b53b6e8ca6818584e6793932f9e96e692bf72a073d83ad1a40647ebfe230926986713510f90505f939f98d59da2", 0x88}, {&(0x7f0000000700)="d9494ddabdf3d8aea0150d22e9e95cfde44db1c39ad337", 0x17}, {&(0x7f0000000740)="77fc598a70439fbc3841bdcbedc664c60e13ee64d85d5966771f55ec4870ef1d9deaf0a49cbfe9b401f6bfb39407419cdce6414172bc799d7ee5b5497356098c6ab1b5cc5e73b5c17dc5c8e0270e6307fb8ed0c022dd9c6d73a49d55cf6732217ab8b7b1d78d1067f789ea36ef97bdaa1ff119b147f1988d4fb2e1de99212c35f98bb5992098491c64ca5decf323e7518235bc0f48bf17fa6a25ff40b5d9ec9abee85798719f22e59e1638f3b78d759200ae95776250ebfd881a27d9ad2c5868568f6dc940c1cdf6a0ea7ae8f7fa91d43163599de9c3b25ddb9694409b47", 0xde}, {&(0x7f0000000840)="c7aed5f13d694898008d2596c33d77519b5ded2c77c478392a28c126865badf62dc80dca88b5f2409bc0dcd3acebbbfd0b3e80b4a7d4c8cd9ddf4f21079f7d8458fcd3cbcc7f9184791410fc5a1a333455916c8c16d83165ee615295c7d90be4c5da97a417b6d5b912cb9742b0b055a6907add1be6803ecbf26c2a1876ddda8c57fd8601f6a94ca44436129f13c1ccf52a6394129d4ca19fdc9e1e81eb94f34917049318241f51c3ca9d69efffddba8c816c8fa81e558f969b6d977d4491e17a7b2efd4f82bf4e50b44af46f016a96fef85b994776c29a9e270fdc8e26e4998f7b9ed0388e399514e353fa8022083118ec919c82017dc3d98f3a20e846ea22328d74833b281c331db4f051a8c6e42e08cf65b155a2ed371eb6a069e5a54c4053893a274558790f3c828b9c31278e5e20ba913b991d3f9ebca9b3182a3a407eea9ca125137319743ba5d8b1f3274e8a7ba761236c32dfd1a114c973a49bf2efd0d6584f84655f250b23e23a0136dde62dceae36948865679853e503c20c8e2852001aeb21baa3b87f88bd5af17d3deced7abbd5e35b5d216cfa307e838f305fb7e5cf0054fc514e985f8f3326c38771da8b59774f91c29d36781310bff98b486b424dcb035de0d2555f7b94a5e14c8d6f4a3c50daebf033f3ee09195ca223e44eb6a9332758ddba24895dff744bd1038aa82de5c1d11c8847f6c1ec1bad5801bdce85b134cb1ee28e367c2d43d0986c57ef9dbd42522287581cf5a62a9561a2166068d65078878c4d56a957f65a374ceee9009d773156022a645c39c98a8fe5ee8d83d2fc6713df883791ab12bc0f72e244398be9c5d1f40bcfe674f9ab096a52297d5261d57a78d12e3a6037e113448b2ec385c748dd984f34e408c05de3d314f5db78bf497ba502582fb9b0aec78c339181ce93f58270565fd8de6190fac144ea4e86a162ece19a800a2dd89dc264b548525b162c2db73df9b224fbffce6c36b522fd8e05667baf021056c0704e31d9e61f69b2839cabc5c18a940a83bbd8e56cd03d47843894772901a92c1d6e180eb14abcd073fa7d96c3a8dfeb093f1b1b8f3b4509e023e053e45fb1ebf967e582295d2dd08a5bb57efbcefa72d5b112e885ecec4002a0733ba31164a7942b5f9b72f9b04c131226b35d33387edaf4c7c78cb9382bb0c66be57d5edc5bd1bca8d17f2a05d47a2bed6fc3577af2fddf410057c774b405f9eea9fc208f3bddda113ab7dad2f54f0c982f72982005832267cdc65509dd41571a1bdad116304fbb038da6307596ffe7384eb5715af3f02db228d5b69442ac6abe162f10cc05b01a7569a60ebab981338ef664f3aec9cb8c923a0d98d6c1765139da1f33b45bd9e6fb3ae5ebb786f46dffce9505d3624f98a131f3d14023553b1c33821c7b114870a953a142b498a4a5a48fa8a884395c7d25fddeb29eb922c293dd26f7cea3737a1aa674068ad6cc7d595867f41faa7742d327d0f5608ab05cb114fa8f74dbbe62205d25d6c7d83135946145bc6d06cb797a1545a620092acd37af115ca88450de7f6ff5727b0a48390d61a769798ab3d3797656315fd0f25cb924ebf09a4a8a6a36309d150ac7d68c520b9ea34b249c80f171a28d2b4a7ddb5aefd9ca8e7a3dd01050cd63cc3a3443827e78139ba1c034a99111782cdcaadf6f6fdf61841702630ff662619f5a14a1758dfda409780f1b6d9fe6f96f9034fa05bd31c42a90dc0f18c1fe935f1f9f0fa06dbf28f4113eacfbf0155dab0002996f58fd4eb58129dbcc32b2c26535a6c6927b0c607e0b0c09b594a227e31785853f2599d68121fbc1326e5039c8cbe6d9ff8c904bf2ce71dfb0cfc87295903d472d5c69bdb590f9a81bb94639a7e3275b21729e8e9af79797488d2d621e4b11c6adbd62efe98b75e3882c6002769403a864fa57f047b1c36bf90eaa3a7b5c2d288cf2c1595573f29856a3d48301e92ca8dbb4f2e66370fc9d52bc1d8a560c684ac8f51d034bdf50fc1b636b53da3e5da48fb7231148696e04989d0a068f7d019f29ffdc556e6d5d690628bb164ca607974e33c75a5381f6446367bdd615a554024b72ae8cdfe7522055247ab9eebe9ccd29775551caaeb244dcde160871a077b92a7b3ed65944cc423aa1218af4aae83ae825c95742a6afdc04a2e9470412a064dcc18cd8662e2681725ba25ce1654b147ca418489f4cae8efc400627fb3e1c20b41fc044a6ccb46d1995bb7ff889fd3c15c2623c2004289bda0e8b875dfd1f438fa48e1aa0e26740eae9cfe2fbc2f0b6555666e62846089be166defebb995696858af12694bb2bde116e15351047da8781f4e6e004ccb5c5bf2798340eb146ddbdd54466c121d31cfa7793e4638741fcab0eb28a0a1659ca12610a8b5c040c9453a014cb959947ed748d0f8511d7b60f01d06956df2240d6df5c591be73f03c0bb3a2361a4ddec2d74017cc79eec32a60eea15f9b07c684392f7b1a5036c9af7bc0242e3cb077ec394aa42e343a5e4f937a38ed977197876d34c1a4e679e8958aac8864e6e4509bfd2660489a118b316f2da659651754a9321595411ed155f51d1ad6843d87c5cc650fad365469b4dbd8d7447b556e479b05e2ff36680fa236d94131117be49e0f5cd8dd0f0bd04c3b1bf9c040c26acec1dd58d11b3fa814830dbef2ce80724073b0931a0a6caa272552315d5e4f5059adcaddae0abc64e8f07e3eab19c71fe75d17f06614018360d68505c63df5e59b91baa28dab130744defba0dfd9b1680f9e1f67263801f60ad708fab915b7d590441fc1ec78be23eff4301c22abec9d1ba9779b3e05b0414e8df75ad2087d2a07a3ee9928cd2d40636fb9c2bee60d9007883a7fe4b8ce3611029aedf148a4c3a0c16609eb1d16044450df814f8fd47d4827e9f8f6367f56e35d78b7122d9d065896d26903d1a2ef51bff88a166447da3969fb89b1243d08ae289c926fe32f28bc039a566034406bd547838cc4aa0f92326b4517fbae71068350b925e6b53be6d25e498b6d4d5035d69a0724c746b3b4c2e5f7877eaf2184595c4d4f337cb35b6b3037b0f589be5e6c22775e45a7cb0a972b472695ad935c38aa5ca4527d1a09a994fe00b8dbe3d387a9c0cdf7604c2c69aa404790ad574212aa24521f426e11f1bda48d4711e1a76f733fb80d22516a93716af1254d8d3bcc58137e8a32e8a7f977abe12e8ee0c4af1a5b4ba14e2a9a5bd75b67d76ef5a1603e2094eb6f87732cb8be5b189a790f0f664cac2abaa23942880a37024c2a9175346dd626ad71f87ab62dbf8aa4aa7f92ff112afd3c6b7bc92fe6ea358db06619c2ae99e9b17c1e5e729976a4116b06a819f8c0b09c93a704e54e3e84946eaeab68c1bc6a6c1ba7299fa006ccd21869ac1dfd319acda99c72cf84b9c3f76eeb6735c7ad8e2c6e185e04fb8cd89d708789666713d370f48917d03fe4e759e3633a3509bbd99b0602a5ad0e365cfdad458301fb8db5de51b818f66dcb0fc4ac301e9393911ec9cb0aee36f31152c0456bc5105917109fc4ae85a250ce87b3bc18dcb1a48d065c72bb185e5f090bd1a2662c4a96be984142cff5016801f53012519b241011899723c62c0679d912ea663a705bdf007e9cc797014c1fd4832a9073e6085105b1e280428d5259f6afc0700a95b5409072034a8da1e2516bb53af5f8fd8a49f3336a56732fb7b90fa752ce13d5c3855d7ff74183a698e27e2f62577c094307fa19556034786aff394b9aa8a2ff7afa013c4ed963df0388a63d3c390bc724c50f5f37c3f2234538888b66e6c0ab6fcfde11c6069772598ebca115961eb025f8c6f6f299a08ca236901937c5c8babdc1de65e92d387deab509e4de0430964c37d232f1b534166271db186ffa82ca25c86ae7c28e8de0d5be61b08454aec8126f9c93d3eb2feecd5356484602184b441fea34d16719d65f74e4a69f3deb1078fee92ba25aec54f31220ede91399fb6be20771c5b38d606c5e1a867a2c88e4a4adee42ecaec944b5c966e674c1ffe715b05e28135d23c3e8537f443cfc3c62a923dac36abb34054dd37ffaa60fa50358c5eb315e04a24a7b2f807eacf42e51f66860bd076a7e3c54f3fb18987156d255ef22b4bb9ea2cc72a1f185763c1de76d5120bebe375419fcc3135ae7abcbfad84fc23bcaa39d121a3f6e063bdcf0834a09a98f8de4651a1bc022ce0c1c4e38b8e6a9639aa9ae95dae0bb3477d661317c7a3c4a718046d81de171ec0d47a04e838dc2afec8e38039b1c45d2774b61c881c3468745dadc92ec6296ff210bee052f26331d985d02f01ea24aa03bb94c5d450fe9853ad40cb6e495d1e253e4b0fd0c06b4c78d6a63e2c2ce11f59a19223d9efd00d14cc0a1b4538db0eacbe5f1993dcbce8e078b346b9574511a929d9eb19ba2c6ba9ace657222f15f50e6932886f957cc1c162ab0456d4fc8b00cf7aad9236a4f82651420a8c444327ae4d7747a20f6d70d849e6bba5c297725b91c575f235ba11544fe2c05167951c1f580c1c327fdd323f93bd9466b68885e40d0a94644db732c823dd344db29d6c0c45fb2c418978990c1018b0dfc89ef852588258130a3000ed3df121985043c55ed2ad5ec2b8da67b13e56f5a50b41ebe15090ec51392dcfa73deb18d3c2397bcb937f6c1886fe51c9ded5d36119903ac954fcc140df62d35a738e9a526becb72760473fa2f1365c2a27351e77bee7abfe6947b0d24ee49a68cc170c664add681e01ce357f5f9e4c35fcab18772c53e354f7aae0408da5fa2793779f1cefbcc972cbad8e2c185d79811a4a4c4f707a7fe8ec1a3a175e2837e67028fb3579e2da1c3a6e316cb3aec0535e2849d06eecaaca76dcc19281f49b3ac5de31183b31ffbe7a9036d1f8173c46268c2045885bd8ece31e36af702c13def3d412719eb532e6de5d3f21c201cd12124884e646ba883b4e2a1b92c795480fb4f4ddff1f7a287f67c6a7b606367bbad869b84bb8699a2820b02333d4c3c54b277ff5c1d740ef669d0f3e714d5cea7ae00f0dbbc9a29d389b9bb30cb21ef62f0f2f768f644671fc8d378750ab769c7df55deb495e1f34358e735f0645b5de742e94b6fc8fdca77f796e30e8ae78e2634b4c51bd2aa704ddd51d5752b3c812aae3c6dadea09c46f413d8fdd3a4be7e80f7c3788a409abf85069181de2ab0b127c1e6b996ad8fa0bd34fbebfa82aaa10d8dae552717983b7caf5d48213cc0c28d5e7a6d81ab7c99692a90709d4f6ad514ed0b98885d4ddb289866aaf0fe63c1e82d7eae505a7e6a421e6b8ecb2b31ed768af72be66d29b602608bf076c6bb271f551dd5c92a6e68d6b396cd2bff376e92f56f99a09691d5ba44ddb9dd71178acb9d98ba20e1d488f2343de3a21107025909bbe5ac495c25fc7032738b2980250e57155dc05935afe334c7dc3d844b2b0748bf0f3e2e5c98c97ee64b9280ac63d96e16f53c8c237d06e2ec3617e1ac671cca243ac23d7abdf80f66bf69167d1f204e641f13f7a673975c4235dd500591f07fb627f46fdb659af1d418dc357819f20f9216e477f8c120cc4633731587dbd95cdf5d777d588e0904e4ce39df1c126d259914a00480b73d4ae4dca7bf88f5bf3976f19ad58fd090130ad1fd424a91698b8d28874527c0a6d52692c34d77e4dc337acd1fcada67575d5982edf462185d9f852da4c94845f07191f7a325860e86479fee43b6d538dfb275294f1f9b7233712787d5d196504f4a7baeb1f4ad5eb058bedd437bb9c06c116aec53ce24e6f52e1b2c84617c42", 0x1000}], 0x7}, 0x4080) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2b4, 0x2b, 0x20, 0x70bd25, 0x25dfdbff, {0x15}, [@typed={0xc, 0x4d, @str='ppp0em1\x00'}, @typed={0x10, 0xd, @str='-system-\x00'}, @generic="ab1446b25ce3215da236143456f804f285aff8e06f99fbc1bbbcaa33dc763a2039f75387659243576df6f694d9d097421df5f68184a5fb0fe705134ad5", @nested={0x21c, 0x33, [@typed={0x44, 0x31, @binary="37c8927b98f43692219982da2f5fd0f309b14636067ffeeb7f5139b4092de5d79f8b42012ca7cacb4c27da1ee1657ea622f7fad049329967c0dea110ad20"}, @generic="2c3f904dfde34d82dfc4108b4a3395c3c12478207f7692e6c58f75d9dc39e6ddffd275ec45094c7c5f8a791e8b55869bf55aae9d3d74565ef28835bfc2a9040c12b2fdd2a70843b11946b8485a44ba632ab58c54f376a5ca0a0a72e345b327148dcafba4cfceda0d79ab2f53035e232d3e99e897fcc69d89e961722fd60f02029c0508146230475e2e8577e0d414e2be8d046d0795692fd40bdf53b61e8ecec093aff112256754e28b026bbd9a3780b6c8f07425f4180110ca3186d48599b041c657a66e790143818169621644d4686e162722f049467435b3e46eb440064ff5816f4e4df1bd40009fea7a612170649b00c926624adfc0", @generic="99fcf498f05e2ac82358037ed9080d01489f255984266cce5a5667e343cc67738930bc752e5b0c661ed13e7e02a46b943b1049c7d53312af2d12e566c03cb2ff1f30d7724e6ad98e862c598b4b179bf1cf34920c066e1bbee23c58a10168a782a8b6677e3e5048d0a01db04064a71b4f342cb7b45647632c773f9c680769a81992ac6e1e1ab6faa5d943501df5f1e288ef436587cf7fd4f6a0e0b0a3495e4113c0502c7fce88cdf826ae235d447d9aa6c3c07e4eaa84d4d2b58d94a8c7289c5c33736d470baa7103d6", @typed={0x14, 0x70, @ipv6=@local}]}, @generic="3bc7cc1c3757b6d7616608ca84614e86c11eb205031e688f5ba8d47afda27de60291", @typed={0x8, 0x3, @ipv4=@loopback}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4}, 0x4044040) setsockopt$inet_int(r0, 0x0, 0x40000000000d1, &(0x7f0000000080), 0x4) r2 = syz_open_dev$media(&(0x7f0000001900)='/dev/media#\x00', 0x2, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000001940)={0x2, 0x5, [{0x1, 0x0, 0xbc}, {0x7fffffff, 0x0, 0x80}]}) 20:48:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae62, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00002bbd7000000000000100000004000510080002000a00000000000000000000006b74ce02f046a95f438bc4bea307c414f406a4d65fec87d858d8cbffb57908a6c88fbcb10ece1ffeabc88d8992faeb28a487422326e5f40615e84ff4aaf901c96a6342f8c355df4690a4ee6a4f197f82567aa781df20288014e90f7296e211a1ac62ea17278dad8715c453521a6d299b6f425a2a27463d1f0155fbf1adc35d649377a55582a4338b0371fd0e920e94832b18307cabe92104"], 0x1}}, 0x0) getsockname$packet(r0, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000940)=0x14) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x152}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="d12a32b92cf583a805ca490d868ba26f23fca83dc4f620218a9681f4e4b25d5127dc716889e7866675491225fe2e2ae5292877562961515ee12b4f62b5a5c80ec6e23889eb96dd29d3f7c7597f77de61fce7301b709a58098653a075939c9e37262409015bb02e45454f2ea017bd0ef2ee1298c918ce57bedc31d4801b"], 0x34000) syncfs(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r5, 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58c6fecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257cd98a4913470c949948cf4f0041788574c5331cdeb5aeb90ce95361e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9000000000000c069"], 0x37c}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000800)='fou\x00') ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x47ffffffffd, 0x4, 0xffffffff]}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000600)={r2, 0x51, "b5c2bb67416450e10ddd57abf1e6b4f0d3f7346c64c93983c8e8bc8f3fb422664dfe8fc2172b3a0d3483b4a3ca456928541dc874f89d4e8f71da7ca27a47c869e4fbb1d65d240b54d3d3de51a5bca5ec04"}, &(0x7f0000000680)=0x59) [ 1032.061140] input: syz0 as /devices/virtual/input/input258 20:48:25 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='net/snmp\x00') syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x200a00) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x4000000000000000, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x2, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0x11e, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x17}}}]}, 0x80}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') 20:48:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r3, &(0x7f0000000080)=0x142, 0x9168) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r0) timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) [ 1032.166905] input: syz0 as /devices/virtual/input/input259 20:48:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30001200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae04, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x20041) r5 = getuid() fsetxattr$security_capability(r3, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0xe1, 0x39fd2265}, {0x887, 0x7}], r5}, 0x18, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000000c0)={0x1, 0x0, 0x4, 0x8, {r6, r7/1000+30000}, {0x4, 0x0, 0x101, 0x605, 0x5, 0x9, "32d98513"}, 0x7, 0x1, @offset=0x2, 0x4}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x7c, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="95c655c18e1121dd49030e6853c704d3fe4743822f1a7fdb9aa83113dd010149816d306d2829518d7bd9018eeb0e4f148d1b7a1f657713d70f4dd333274e7d602f3474e8d3aa56d91d0ba470b6ab65", @ANYRESOCT=r5, @ANYRESDEC=r8, @ANYRES16=r2], 0x0, 0x0, 0x0}) [ 1032.469311] input: syz0 as /devices/virtual/input/input260 [ 1032.563354] input: syz0 as /devices/virtual/input/input261 20:48:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1032.619102] binder: 5475:5481 unknown command -1051343211 [ 1032.646771] binder: 5475:5481 ioctl c0306201 20000400 returned -22 20:48:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r3, &(0x7f0000000140)=0x142, 0x916b) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'erspan0\x00', 0x9}) dup2(r4, r0) timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1d) 20:48:25 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/127, 0x7f}, {&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000340)=""/26, 0x1a}, {&(0x7f0000000380)=""/97, 0x61}, {&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f0000000740)=""/229, 0xe5}], 0x6, &(0x7f0000000480)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/118, 0x76}], 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={"6c6f0000000004000000000600", 0xfd}) 20:48:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00/\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:25 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x40}}, 0x0) 20:48:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x22c, 0x4, 0x1, 0x823, 0x0, 0x25dfdbff, {}, [@generic="18d5f677cca1f8ceb562fff92d841ba885c347502943c3fc971b6418d254f19405cadb62adfaec33f4544e8a4bac7b48388da396401177ca5d0bae3461b61fe3045c58309a020a76ba8bd2511ea6d4adfa82dee8007e6df91a1bed2e", @nested={0x1a8, 0x77, [@typed={0x8, 0x2b, @ipv4=@dev={0xac, 0x14, 0x14, 0x21}}, @generic="2410d08c5e8addeb0f66e507610c9f41f56db7a1f816b404ab0b5c222b30426bca7b20c9546c083f3ef222d473600d56b4694180cf03eae82cad2be40cbdac99fae4fe671b243225e95be9f6ce99bc8018292224da8443a58a28772a23d8885096e5808d091124cf698fa578d7c8c54c8a7de887f95ab6c47f4b72f58c804afd247e544e5e2f9485f440d3bf4cc71a94798833f7f46fbe6891ed1178ac401761cad1bcf77bf90d99c885868d8c56bd9f0e438809290484c59204ce", @generic="6a59c1a670ce039c623e04a0ce08e7221e552109fc95e8518a171771c121691ecbf23249cb877484f4d33cbd9a09220eb2f1aebee6329879dd142d77b41564c6102b7bab21758a2e1561615eec4eaebc9b0a9976b58d324a8eb39195e87aa02b93a21e6f0045f0f14a5f0cb7497409f5ef0e0c016b94efe01b8c604c2ebf86d80408bc40facf526a541d5c45fabd4df5b78ab15a4d069c016a4efd6b315426ec9280faf52b18b65499cd0dc8a14b1b67c69208d653662fd30604cc3fd4dba10354b737e0ec9a14005c148caf", @typed={0x14, 0x84, @ipv6=@dev={0xfe, 0x80, [], 0x21}}]}, @generic="9a2cc85f3213a6466b28744bc9d6b1f3e0fc"]}, 0x22c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 20:48:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xfffffffffffffffe, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0xfffffffbfffffffc, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="9f0fbc"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:48:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) tkill(r1, 0x1004000000016) [ 1032.919463] input: syz0 as /devices/virtual/input/input262 [ 1032.953180] netlink: 536 bytes leftover after parsing attributes in process `syz-executor1'. [ 1033.001115] netlink: 536 bytes leftover after parsing attributes in process `syz-executor1'. [ 1033.023963] input: syz0 as /devices/virtual/input/input263 20:48:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000000300", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="50040000"], &(0x7f000095dffc)=0x4) 20:48:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae75, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1033.230457] input: syz0 as /devices/virtual/input/input264 [ 1033.255036] input: syz0 as /devices/virtual/input/input265 20:48:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:26 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000000)={{0xf4de304931f22af0, @empty, 0x4e20, 0x2, 'lblc\x00', 0x0, 0x5, 0x27}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e22, 0x12005, 0x4, 0x2, 0x1}}, 0x44) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a001000000000000df56df69741f7bdce7b0838084d72768dcc6ed26027099fbd4c975"], 0x90) r1 = accept4(r0, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000100)=0x80, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x101000, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140), 0x4) prctl$PR_GET_KEEPCAPS(0x7) 20:48:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) getdents(r4, &(0x7f00000000c0)=""/190, 0xbe) 20:48:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000001100", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae53, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1033.670674] input: syz0 as /devices/virtual/input/input266 [ 1033.681815] IPVS: set_ctl: invalid protocol: 10992 0.0.0.0:20000 [ 1033.693211] IPVS: set_ctl: invalid protocol: 10992 0.0.0.0:20000 [ 1033.704443] input: syz0 as /devices/virtual/input/input267 20:48:26 executing program 5: clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pause() ptrace$setopts(0x4206, r0, 0x0, 0x1) tkill(r0, 0x3e) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ptrace(0x18, r0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffff0000, 0x101000) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x3) writev(r1, &(0x7f0000000a80)=[{&(0x7f0000000040)="c6", 0x1}], 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 20:48:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000014c0)='./file0/../file0\x00', &(0x7f0000001440)) setrlimit(0xf, &(0x7f00000002c0)={0x0, 0x9}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000013c0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000580, 0x20000828, 0x20000858], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="505fa4b1c968ef"]}, 0x7f) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="8f630600"], 0x48, 0x0, &(0x7f0000000440)="f639a64a0f0fc76ed5f2946bb5b89defc8a0f965f154d64a0763dbbbced9873a96d954dd982d6db96ff55680987a3d9e107637af4a1e93ec0e8b0200004c0a6c62bedd89574c9e4e"}) 20:48:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e23, 0x1, @remote, 0x4}}, 0x4, 0x2, 0x96f3, 0x7ff, 0x8}, &(0x7f0000000240)=0x98) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r3 = gettid() setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r4, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2c3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000540)) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r5, &(0x7f0000000080)=0x142, 0x9168) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r6, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) 20:48:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae15, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1034.023887] input: syz0 as /devices/virtual/input/input268 20:48:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34003}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002800290800000000000000000f00000008000700c362ed81553143f80c8f2d7997840dc34de50a4a0d12d6b886890d", @ANYRES32=0x0], 0x1c}}, 0x0) flistxattr(r0, &(0x7f0000000000)=""/135, 0x87) [ 1034.101272] input: syz0 as /devices/virtual/input/input269 20:48:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000300", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1034.280867] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 20:48:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) pause() [ 1034.413822] input: syz0 as /devices/virtual/input/input270 [ 1034.421102] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 20:48:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000080)={'ip6gre0\x00', @ifru_names='erspan0\x00'}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x12000, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000040)=0x43f8) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x200, 0x800, 0x40, 0x1, 0x1}, 0x20}, 0xa) 20:48:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1034.496578] input: syz0 as /devices/virtual/input/input271 20:48:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') r2 = gettid() ptrace(0x4208, r2) r3 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) write$input_event(r3, &(0x7f00000002c0)={{r4, r5/1000+10000}, 0x17, 0x5c81, 0xac}, 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0xf07, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x28}}, 0x0) r6 = syz_open_procfs(r2, &(0x7f0000000040)='net/netlink\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x80000000, @ipv4={[], [], @multicast1}, 0x3f}, r7}}, 0x30) 20:48:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae4c, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet(0x2, 0x3, 0x6) r2 = socket(0xa, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000001c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) creat(&(0x7f0000000080)='./file0\x00', 0x100) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0xe, 0x0, &(0x7f0000000000)) 20:48:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1034.719698] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 1034.758115] netlink: 'syz-executor1': attribute type 1 has an invalid length. 20:48:27 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) bind$packet(r2, &(0x7f0000000140)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) inotify_init1(0x0) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0xfedf, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x1a) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x13}, 0x1}}, 0x7fffffff, 0x76c0, 0x7, "493d253d9b50440fba6c1a89f002408ffe8694cddbc4b7521129bef21929f5fe1e129a190a85198d951cffbd0b4e9fe7ad8e162e7aaabbabf098390985437beebd0edc4f7e7ba80312dc9369cd694504"}, 0xd8) 20:48:27 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) syz_open_procfs(0x0, 0x0) creat(&(0x7f00000005c0)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x86100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x9, 0x692, [0x5, 0x4, 0xfffffffffffffff8, 0x4, 0xffffffff7fffffff, 0x1]}}) pipe2(0x0, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r1 = syz_open_procfs(0x0, &(0x7f0000000900)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f00000005c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x86100) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendfile(r2, r1, 0x0, 0x100000005) [ 1034.786526] input: syz0 as /devices/virtual/input/input272 [ 1034.817397] input: syz0 as /devices/virtual/input/input273 20:48:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000000000001500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1035.176812] input: syz0 as /devices/virtual/input/input274 [ 1035.219057] input: syz0 as /devices/virtual/input/input275 20:48:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000540)=""/4096) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) 20:48:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000040)={0x0, 0xfffffffffffffff8, 0x20, 0x5, 0x100}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r4, 0x4) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003200)={0x0, 0x0, 0x2080, {0x6000}, [], "d07ee5115b8ae83623a4057635ff839665dc71032fe5bd7f4cfeb5de0e66f292625b3c83ba87c800e738a125263d6bd6160d8a90b160a25b8e6f4205d104ecca27734a655ab6b937108e5e87aca4e1b5529c6394c440f60f4ccf972c0c286fde28b7feceec47d977a08a7f8a193c772ccf4e1aebd71a2423bbf620f291eb5aca0c746e9eb0958cd608d4e6da2d96ea1427c4176c30981b69008a5f3283355bf825ea8e31af3b9f3b13875273d3eca307189e3b02a660effcbebfa31c5cadabe1a3a8e301cde0fea0c98c92bbdf6504141cb8fba7af0b3191285b6d2e33a90b41dc081fb289688faf8d40e12ba51d93ffaddd57ef0a578c3052390ab5e43df11af893f5c573a7e1a792b38edea041a28a7b72690e07d68877d73cda83e439e23135e4b2f80a26d86155bc17052886f12ba5dfa6593f766141e391b09544b986514347ed148ba344799ce56dd92ea99c9222bffe399dc436eaf3d2fb2eec4495f169e2d412a5e645af48245c39d059460cca16a6cb085adae5b33b576ba001a2ae21335708820d6e59c36296bb3b1ae41e00ced746e1bb10ab20dce8401ad2c8da2157c7437e24031e28a67c4c51b393673f54ee12c499edc99ea48f4821e83aba99eb8a1070ef27e24e974fd5eae386c144fa65902415923d9b58506dec2ae86c95ed9229438ac62c8165d54f74b6960dfc02ae09607a83e43bfdfde70a50a7a4c68cf9c16b8707ac2d559faec9b77e85c6db3da4cc32525e7ce7bd5514f29883baf374eca8302dba967bca0fec783a01266e03c947026ace1ea653aa3bb39c99bb3ec87d984c0db3e9a80eb3248e43dba6b64c228e2ef93c384a06d6259804277a59e2a23f13f9366e8a38d7a0f0737aafe82fd3c784f5aca1da86b8765313ced4cafdde6d2e811750895264f530b202517dc2c64b87de72458e8a0a05a1759bd837de65a46968b48cd52f85a4af9709d031a396dbaa302b8d07cf334a209fda41b6f478924eb32941cb74de620dc054dfbda780316280133c18a3c34388931c4e1b023977ff432928af801584585b8187feed1c89750efc887a8abfdda565d1ac3815365cd44e708743169c220df70794c34ab96588e4b4580ef84792ca845e8466a4ca368712b86390047550bba1a4b54c1ccf5ad664d6c6d757d32f9e02a391d5fc43aa73a787621d5330012abef425eb9002874d314aa504a1a1a9ea01ebbc4e49ffb06cce3adec2c6783f33a0dbaff1301f7dc2f733189fbf1d8a98fa9a53103deceacdac7b9ecc80665fcf938ae1658af2abce7065a9001f961e7c81f54a3f924d698f017b57b367b9b3a233985ad7707b2adb535c8788031cc939a100eba443487d205a784fea409f8c912c6af0e781fdd36c336665993614df05bce28836c6298d9fbc4476d2d4dede27a794ea2561e4f587aa630510f09ae84d327dd84e416c408d9336a304c7dc73710da4259a4adacf499eed14178c38845cc891f31ed4bba88c6a324ba7e4e32b198cc959e9f6c9dfc9c5ad10b3fef0a03828379147765f5a2103e63b9b27cc89c5abfea53fdf5dbe2e57e3845f055e81a9cf85801fadfc898efa5ea044b36a592770c7c6f9f3153103cb4a229c18da6bd8b75bce23ded850aa7d8dafe2afab95c59a200856da85ee549cca22f176bb1afb694ec8aae2223fb982590eb7b44324625728ac9661207c63cc3ac65e898c51b8c9aef23c7aaf8f2411c1e6bf5fa30c3db451e91b780bcc73cdfb53d6a2b6f3a0600135eec6ee2b558484f0b7fe2c4592080e604afc11b16c1102d200dcd98054c280ccc98b054d5d3c37383595944a7f5603ae7be51d1671b8213d723812fc134c4e5a1a13dd288272e0b889f5ee4544b1a74f9a9e061e299fa64bef6a276cbf35dae45c236dc823f2ed5d90c98248fbbaaf357f63ffd5681e8c60c65b0471ee975736bb753b320d9edf279afb276b78b06349cbd812846e43526d998b4535de85f42e6ac32a9d44bb2edb261168960c7c6ca7ebf239aeb480436507b5de4997682bf6059a84f896dcfee8752278e5d9f08e3a59ac6a707103275eaf595d2e264d1477f595128d4a9daafd8cd7c9c0f19378a0225cf77286572960a5dcea3c07d70861270862d979ee6bc8d43c0186862b4166bfe172bd9cba2d85104e1ca9c788524df29866a0b3e768b63ab98f7cb3ec1d573c44b5e1a0b9c4bf3c525fcdec8042a8f2c4623e71ea080c7e12c5a3297d3c35dc17e74a5ce9d779ef9dd5f3022739dd15c42ca5db6e16781fce484f13531f00454018f57386f8fd4d2bb2d07b7992fe77eca48d689fc29028a2ce757e92bdf281954484d0fbb3f6b3d28084330aa4811e87819feea18ef9517cb75fc1a7dede2534a3f362f2cbe2d917b2a1be430eb31d4a4d5bb29bbcde8cd33fa4f4950d6ad66259b34f7a615dedd3a321b45e70ade75635f86acfa46b111ab2859eed140e6a0bc7155895c046156742a1774c619b7ffbada1ef14070c0f5171afd728e05f3cacf6b77543105d3e8f57fdefd4f3eb49e1212b3ff6c9e53954727f01ef35e9ae1314c96cedaec73fc70b484562de5ad1ecd3d9f262a0841fe05f9d823d6a5e20fd90d50b6c3edfae340565042bb22bfccb433dcee0da8e771ce268fc108784d9267599b6de411655f94e9c12931fe88c4b8e7632aabf2d93e17632277f270ee3940316468adc35c93a9fe2c1cdedd7055ebec7f7b0b43deba218c536da593e2024a5aa3f94ec7d6379e876949c8b3a0193fdc6e5504f5cab5c60ad5b6e798e171d1fb67a3efb823a91452d3b4ccbc9e0119467522ea2fc59153f1cd218a83c86fadaa43bbc3d3df7574f910a921c7fd195a90cd08671e7587dfd4f1ee4f44c8eb8aa6122337a0fc2ee9a0918021ee6fac1a58d93732b867fb67530ee7e0f4d97b352922f6754783f978299cd15672a7fc0a05f6717ea3a9e0988fcdbbe0201b6c85e5a311cc34560091d66758a9f916683d70ac47734121cb0bb8b914592720d6e88dff8fc65ebdc93c5aaf04e5e791c40c728811f947bd0e47602892feb5c2d412c2f2ff66afb7ff3af62b26a271ad246d374004e965a478edec95ffe03c9eeeda81ab1ce29a3dac1961bec70b86e024dc98119550d0c4bacc9fcc9b49cd07b1988704ddd4d9c875d2ddb27ee6cf17abbaa88553cce24240807c4c0f93e4d5e25966562062556cfd99973277699c7c3079ac945cab58fb9aeb61038e97041b375880cfe9c684aff0a1fbc922d971297db145cfdde1206e301928f9e256df4495374f408f5d1195923d82a8f5e2cf7a3cdacbc62d3d36692f11c2086e123d23647d6f9f5285effa2e0ab00493d5981fd636a4e6f3929d297d2b9f48e55e9db3e5c3a4c4ed5d473a273aeab608531db532e9ac8d5c1e29f404f13c69925380c8c310934152fe6d442db2dbb646889bc48011b1f91d07a89dcde90329f1cc84718631cdfe03e2e458f4cf4e2f4122aff94322a77fb8b5da1c0bd29922c73f4919578e6805f5a6c62069949db8fe99c281b0990ba1b0c0be17efe8f545a4ffc50857dd1f0133171985ec4eac992add043ab1cec8d16174311f8e89ed04e80b5baeb69b2da5e32471908a2254bacc42372d4b03c6e5c4df914a75fb87a2a0cbbae2fb7918e9af9614c98282fcedb6aef4d06debbc623aaf22a2e993fab42389ab2f27e72e8789f11cbbde18327b3a360f567df53a67f660fb77d9f2fcae43e8ae73aa7c58c81e948ebc132dbd1f7ad3be39ce3eacebf795b542a18a49c296fd2c98fa6c1c92f29392136c2e8e0dc0150b7cd2d91714b006985ddcbd80879676a3f85a75c4d3b5415db93f94505bc3eae2ecbef6de15615514af54bd885288684376e1d11227360773a35856719e18aec11d15ca0679ff4d53c477c9cd30a7a45ca6a4838c0b085078bd42e6042be8269ce9759f1d23fa98cb8263c8d4ac89577bf3154369e5b40bb1ed28f048a4006efb707b5eacb2f6b3e93c6d19eeeff49949e8b5d21894caaea8172d43bdf6997fd356ada3fe6ca691d86549fedefc719b74d739c431ecd4800c104c80c6621dcff5eb98c47b7b32e2fca7974f2bb1024e4146bf0ec5143e8b10fc29c5bc2f77b5021c34e04c26b93f02bed53c17af765a2853710d7f2c49192b577024233fb566776973c62239d038fcc1353e36fc200d386fea3268699aaff0c6589cb2245d3e967a3eff5cc866527adad4ceed45ba619ec8b053bbbb62b88f3bea4f6380a5a62d86608e5e6e355ffb78a484c013f19977943db91b69686c818187438003b93378ecc8667c9902b0ee36a6560005e87ca8132b338d2116dee1c051a1f815df2950cf15bcb3129b9e17bdcfb2130fe3597852fed354a259cce452d10ad2ed89b71b0a71c173c95578c687f0129952e65e783b33bcb53183c017b4a3f687f9d985d6369602a59351059f9a9a3985ae7d796eac76c66a6eafa48386d9fbf9f7f3496b8c5a75f489e3dfd596e7a1786ceb22a80d855dc9ebbcce089541d229de4e6b3a963f2d7fa9cb6bcc14eb6ad856b950859f40925dbc3aece4dad967b971223f63a66514aa6eda9617cab9553af61cfbb230f687c77b5cf51e8df891de582978ab5cf76d4fb35127fb20b624020a8dc23f27e27d215101c773679722929028fd164a7d44cddb6000ba6e3f17cb268a5d3bc3528d3a31ea506a2ddaf6a1d3e0cb695719f958fe762b8e467dd9f4808e22a0329037d3e92a1f31600441503bbea4769e1d055d53efbd915c2c9e3b7a91e66dcf9e0dcc8c19de36096df44e81898347fdca40e0afca5f428b8d78a301415588eb7a0fe859af02f2c88ad2ed960d68e9ea0b1379611298e0f0a0c8dbee814d32215e631abf288be6f2ea95a801dcce8945a183ca708d8523528410deab79c332646a610a4439d77c0895a1dcf626bf3c2e53cc1d809f27948c2a0528cbbf737612b52a28e8f9eb8241907574a2ab1f17f72132be70ba6fa3e3ca004144a241cc2c6a668988cc8c8f7b54e963b760f53bb2ee14b7018a0e98a8a5df2eb29d516d008ce5be587b60c712fae13c286510d77ac2bf45a084552b4eecb84c5c358f9419aac5b4cba705576885e15aaa26bbb910c0fea609492587d5f4d45551c52648a457387eb5b0614f189faca1f4be1ac326260a96cf3d0814dc5f6dfa36fe219663315771f78ebc1f942d859e723aa214aea82d2283f7b6b0b27aade2c0ef85bbe8bd5fb5d32df6ebb1fb73b665a5ac57a3e2d23c6037ef03d71573f89e6054f9bd0256c55e30a549c7490c0ab8215ff9d86700045b59c97216421b504a6f956bb2e4ce2abd3522ae7e78140d1c051affd088a9b41cb8df7269e318d26fd5532cad44eb2e7b3eb2f4e5c5f3ee8fafdce7fb49da1054e498917ae63d401d17f6948c454bc0e1fe6ee962106f4f50e1f107d215275488ee933b806825e759241741ce028a2aa29592e323e0bb0065c4e0ec8b76fa8905e3a2261d9c97ebe87c65d39b9df25fa7d0cc9d2f0887648e5eeb70c5f91503dec67adf8e206ad32c51f9ee25b3503c712fa725ffd30131eb026778b06c8a45e8131d029d7e22062ca4dad4b4d67c164c932926c4f3dad991756623d8fe1ab39590bf53085036fe484c137be5a1af5e464e6df871db54057211a842c40de3069fad8320d74ffc1d5c0dba4b63d84f69a36e5c820cf92fa15db3597f66c66e3f4d4616134f3754029e69374c5e439358eca89fc25cff9b1abf2e5e98ce310f6bbbf052058906949f5852e241425c542e5a3c5091272cb00", "c5414f84852cc601992fb0377392b0ec46813bd0c4e104e6470d4cc05ecd892683c0e62f0b0fae5124986bd24220fb2b7810af6f05f5ceda818c1b044f3e9b67965430d3739f1efcbec0daba77d8f4f9d8dca7f6c93383d2964a0e4f900c0d65ae602a81f5d777a967123761145ecfd7a75987ed8cc2cd85092c06d359ec7012b0f1b99593caec7ce1a7b016cc06406dfd7f2b5022bac631f3991e0486e9b4e634a57efd59b0393b81b841b7fda854bcd274e5cee7e47fe2258e380fac3516a1f0f0caaebf090d37f323cc68c415d4431d80ec2edb9b83ab0eb2f30700390dbbc76e7d0e8398b14281b9b24f66d9c514a295e95014cc0b84cbaa84260bf8823ae76e3427d0d930c280709b6731ff192b801632774453029c438ac56b06ac92de6dac7d4d85cade584d9535e1f2c2998173f4ca112b1bf9f9f7c5721025557ee33edf3b8370d674372245e1d8126e258afdb85a24c881bf2e7ae0124f0306c127b1df5f056c5b74f8ee7672b0fab9653b97ec6cdb88512685711f81e0f27399f138802306ab13882bbf989980324662c0f3a1792fde78b8a48841390154b96eed65e086d882e8da64134ecf22cc99e3274532d5921c09d6b0c68780e5167fd925e5a9570530b1322d2e72f6f9747568a80d402e7747d6607075830477a21d21ca74a3845b135f5cbb6a69cde9eb6520ec42e524bd65a4b3366ec198e2b860b2f7211694aa25d4a7af3a092f7ac141dd4b5ab7012f3dab0ec7b9edd77e5c05617a60748b73a02be7766127c4fbfad0368e043da62ff978afc7e530a62b9db2c8b9d9035e1306b0491d0e1d8bb5f5c91b88f6b0ab6dbadd9cb686a7cb0d9e1307543a352bedd5b4c7406a4aa4f454ea4dcf74713e2d8e93de35df1e81825f4bddfea66a2e8cd7b3ca375ae04088154b9acbc9e8ef28fb7aee09b8da9ce9bfceadf9142374eccffc74766463fcb0d948b247ca0dd74f0b06ba70ae219e5f2ed9fe92886fb4ca6a93b23ec3fee89444e556817f6c96e3c8fe3611e789aabf4f6b971899c6d6c242345341172699d17ee28b1f499ff3a616d9904f54896e53d2a04b5592c0e27d6e9fe034eeb079958b0d1d946c07e47b8fa5b7cc3e7219dbb0d7e2ce3b2565c0394be202ea85559b9431497ffb4ca2660e24d7f629552fc435078bfdfd814c29c8abbb308197800c0562c76a4ec25472df123415c8924496ae770303f62ad87b47eaa01c27220ffc0db73f886a6dad7041d8510bca30b6aba0e6c8bb7cf2bfc3f76ceb2ccb14007444f8cc51f3717b5aa8d0adc1fccdf166de932fd9ab056c60fe70b2104f9ab2af58e458abb16f483d6e8f2bee5677b3ffb79a7063262a1243aa80fea9e621d298189415957ef44b3c1c9019235e44dedb07ddd78e02a27342f7502af6aa810add05b12c8bba13f6b43afad8db825027ed8aecd0f1ffd078768ff03da49e23ab3aecb6c890876753fe86444fa6bb6e958f156533022ec40c142dc2d2e53f346c8d51187ff00e6a9dad9799bb5885effdf7b9b6fbbd227fa8b6c66adf4160f63e1b2a55f4cde2213fb2cd7be129f2197a386cb75ae980e36d794786c16f1ef70d05d78bc25ebaf75a152755b25909fea16b026e32a0fcf5e04d9b284fb3338f2bb07bd675cdf82222b93ca733d15d71409d270cb2a5545184820af1eebbdf8783e62ffa1b25895673263e9a2739b71aa751c35f3893e1dc5c1ef235d09539fb6b07e9046ae4d56557a0d689b6dec868a331e3f693bcffad8122f0e6c773049ecdf326a1a9a177f2ca6fbde55ae3d0466ac9acb3aa40af2e00c5b0af713d3f7e0100363c349afed61f847c4a60ecc63c82da14eb4850003c32bd92398212a5a402da756be7b26fc5a7d51363d4b96fe9f3bbf9e83119b7e42cdfe1eadbd27e1fc07bda44d5455c1626be9056b934cbce4a11bc75aa868ec59ead51aeb0cfd96baf06468a3cc7f0645ffd1ffe52ffe137d3bddcba59fe831fb893600a589ddf5f9a369d4bee2dec9f5cee72721f7808625361b807d4724f444bea64f7d8b569dd7d4500ee770168a8c363943f06b74e231e315e33fd125003d2ba11dfb74e5bc617b50902e8a3018e4c9ef643419ac5efa70ceeb2c0e6d795294e0cc2b581f3c9dde72aaf47862d7b0829f39ea8c441f504ac87557a54a6e353c9df6ff6a97d83f5c2ae055f5caff86c6e54db9ec8b4f27db89ba6a05ac5101aca047bf4470d99d49b6f2a80c7444b794e4eab5de057837f0ab84cfae955e2079f253d597e3b7ac7f96d2574eb2cad9967d9bac65d23a50c4a68aa36d515d48cb5aecefb5857760937c7840632eee1c425f2a0556c3e6ffbc46b798c6a8bfd798cbff1e492344ec525d65cab686920cc4f2d1b62de8cdc5653ec980810ac9456225952b47f6f467d7eb6acd5b7938ef619654521cacee416eafd5ad7f7e4d5220aea56ae25af5c28f5bd2191b80aaa76f910c439c14dfd3219233ba2e499e2dce8c645f6742af1a022e3637fb808f94e65f6409412f3336604f4dc559cd8b2fd121be25a884cc5dc34a6a37b04aa190a916407a8aec424d4b922e79840380c165ea42470d7c320f967bd068b76c01cb0f053bb59bcb0b0cbb79102e78075c66d6935151f617f2477a6ac61ed71dc1f51c58580202ac5a54473ac1866231a2c7349164bf705dc24a642879c4534ac355808ff0ebac194d9511e2210d4066e209f565e74b3fa1041497030532bfc2f32d28df094ab537c270abe0e0775624d96ffae3908ede0fd4c583198c1de6526d352e67913867f4db95739f36133637d323c47c71615fb367eea5c743921c75c43d241093d55905c831a05b0172014d7c23ed60368611820e733cf6512698f84f5d14f5ae5befed67e52582ab7d6cefd53e4b25ccef5fdf0707966f36cddbd459b1692522299a9ab6af63a67a4b5cb667cd31b711c560475dbd9debb0a8a9ace85aa0da1e5bf36c76b2ce8197dec620be96bbdb3083d4c868d98f567d98915fb7def6108deda605784d1fffc26b594542fe931347b2a9eadba67f2780b74151b869ac725b513acf75add42e928f70a45c6ff5d83f356c85b6874c049a3d71952e76fed01bb550b7e904b02bd2a3c81de37d2f8ca4a12e6cd432077e482f2a10fe6fdd968006611860997c1dbce97f33ab38801b4746bddf657f11fbefa93214541572ee81c82546a324256d601a3acc5d6cf9233edcf89de22a8f0615b7f8935a4116cf26546edf5773b1f686e231524da182aa10e652d4554fc0905ff6f6a5df46d4af87d99c4e1065b77c1ca64c29267a600e801474905d460b45cf85cbf76dd75e4dfaadda402a7f5fd195eef247caa6d71529759e927688d0f4c9836f55c594e61fd471b3080ec928dd2bd7661c7f9900b436266262633b877a2772b60ae5ec04e38dd2aeec382738ad9114bac2232e43fec968dd7cdf1c19a48749eb727f6b75218ddb00678262006c330244ddfc051a403201dd52ff637f763aa9b18a030fc5778eb74d78b11b7cd8f4aa50dcd82301425600642352d4c1f5d2103432893bb880f6f36ffb74776142f92010241e497b6a39c169295b4a272a902fdd3df9763c026de414bb1e9e1b6f7d6becc2035524b74e046433a4da8d3e146d34ae977c0913d288eb3e79c8ef06a3862ec9c993b34600e79d042cb63d0b0e292c00665a9b03e3e91a3cc20da11cb7c0d3481b5b4794c40c3fe8b35775a1082ee731a4df9c857119630687ac1b7c722673348400cab30f3440ba1fa5385f9b07abbfddd8be22ddd0b11911c6e201c584391dc817a316a8fe29fc99d602f9564ab1a32cd3f8624accc5542f9dadb1835d7aaa193b36a5b562a3693111b88e04c451fcacf215983dd81745a01f5331e183ff0488a6130d3a2892292f30430d80460c194684a55ca380dfd9c136f3647552c480928f03f7c653791682c08bfb707ac53e9b1d29972f9a79523e1b65f9de583db0ab18f2e0a39c40e8fd260c538ea78cdb31e0fba4bdaf1cd4dd10e84a2783a0efd72787506a805840ad8bb4ceafe59a82ef4c82450e262e302852139d1548e5797d6f7dc9d0dc870c574103b6d4a0642d89321a6df932eb875c755e0c93398124e32779bd7bc3edb846484c6b7378dc427b68a0529cab72612fc7115505d720d23a4de74e3742611e6f1d1ca187818ba6e526659dc4833e447bf9b7a8e848928c59f3e921e7e96f4bdd00926744e2a3404eff5b1b27786aa23259fee4557ad0c195ada64bce904a7a7127898ab4979ed4e08d89a0efd914ca5067dde4224b083f378a737ec5710daef5eaeb8abe60d533ec17a091c2d6cb0b78933cbefdc548b133a56d5ba8fcfd78b5ad91a0a38fe240b0609081a7e115020469ff010def84650e333341b511d27fa9af16ca5a5bc63a1b8fa88e43da8bdcc80edebdfeb009b8dc5aa6bc16774f898a5f7ca3bce276eeffb961dbade587959a62a08122b1727772ade968625d768061e9b36279d7d818a0ec4b5c3656f26771354effe1a24295d63eaea13a29afaf275cd21f7e21e7973cc541cb27518f232c0029c4726ad9a6f22ccb29a9f46bf19bf19abfd7df8a375be6795a3b4aefe6f7e88d149db827374109b25a4f68227a477aa989ec012abeaa53c0742c8fa96c4163295f1eedb556fc93a4329f09c5ae906361243ee3fe25032ffcce4b8ac52d4c93ac6ed8291aee7f12cd6604663ffc2d311131835fb1e5b3594d9b33b0429d8818df7334a2946ae6d37dcaba3a1a444247778f4719f8caf9a39fd6c284fba3a6ad039c2d1eec68b92f877ee1cce10ead53fa5f28c3fea4d605f1c6568fc98d94f0595b0beaa32207e29a0577fede84cba6c62f38bf8cb4586e52a7077f3243a15a23daf61ab7af40384ca5dc9ea7aff335f3fed58c2521d25883bcc76869c7f13af9e75863ab64f6aa8f1297be6de6642fb70e74e68852d90c9ab46c957bc866e9fe3de969046d6ed5a3e52e28f3363f3453f08d69faa29fe16c4ef5c1d9524158cfaf611ce354fc819207c68dae18796e04b0e09a849a8d523178b5dd5e4198480c597cc1604828ec51d4b7bad6a23def0ae1517b6959edca3de4de6f1872461c2576ac6411579359a50c2b8e3ac3c51193941ac37774f870746da3cf046aac103ba9da5f4920556d125557d033f18e8227b1fcf252c87069c14a45acd86991da02f8147175225a33519ac344088f2b26910cdafe2b6392987431f68cf0d2fecab7d40ebd149af79ba007c8e9eeebe2b8147e36bc54d32ee8b69080687b6faec1e3f2aeef44217c89149a2416f1f4177deeb6d9df429b1e58863d082f54085914b0e9bff75e0af0c274fd11d315dda22a5c6805b181a559aa21da4c1080746b7e244592d00fc0e13e929668a560f0bf23784dd158a4102a4e4cc95945a0ca18a322871bba4186c7488bdb6d21cefa333307e4290708cc2e92469d1fa791de9abaf3a89988a2ba6390147d5d00e96ffcffa60187d712bbab53ddc19bd4ea8c26ee60b281c02a7418acb31377797da4de1d446a8dc8844c50423b6de01d0d70952af10feb17e0c1eb3dcfc5b085a8f5aab31b9647d657388ba7ce955b05d190980aa9c5af7f69123710632e7c00c1332a665a0eee07780e3e8762729cb48d9588f644319d13251df2a667a85d716718b3a9110cb6ad941b076e5f7b29fd9486e470c8fa918cf15a8db86dfe3bd6a41faf1f43e9994cabb66953798c7c4416b727c5f55282bd50c1dda6500e78e3c073ba6f6d09c1c7f1e22974eb5a0ed2600"}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000140)={r4, 0xcc, 0x2c44}, 0x8) 20:48:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000001000", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1035.502456] input: syz0 as /devices/virtual/input/input276 [ 1035.574210] input: syz0 as /devices/virtual/input/input277 20:48:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000000300", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) recvfrom$inet6(r0, &(0x7f0000000040)=""/5, 0x5, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz'}) 20:48:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8f, 0x40) tkill(r1, 0x1004000000016) [ 1035.956139] input: syz0 as /devices/virtual/input/input278 [ 1036.008547] input: syz0 as /devices/virtual/input/input279 20:48:29 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) syz_open_procfs(0x0, 0x0) creat(&(0x7f00000005c0)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x86100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x9, 0x692, [0x5, 0x4, 0xfffffffffffffff8, 0x4, 0xffffffff7fffffff, 0x1]}}) pipe2(0x0, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r1 = syz_open_procfs(0x0, &(0x7f0000000900)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f00000005c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x86100) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendfile(r2, r1, 0x0, 0x100000005) 20:48:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae7a, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:29 executing program 1: mkdir(&(0x7f00000002c0)='./file0//ile0\x00', 0x10000000) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000080)='./file0//ile0\x00') r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) sendto(r0, &(0x7f0000000200)="009fbdd11e447a5cdd6e380c40196742cd6181f88ff582c1690f5c3b11eeefef1d0afdefd757f535adeb71d81a9e2d30376e690449506a7fcea5b47cb100c30686c71f9d5e7385e7ad4397fb201e100f07050c7c54b6b6c534ca058d90faa9a69db9f9c7338f981b05021c292d0f2d18705753ec5ecf928ecaf205daf184c4d059305e103e41a763f075af9ec8b15143ddd87c6e5ffd172774831cf03d839166630a812fc534bea41aa391fd68546b25b23d67d520dabd60", 0xb8, 0x20000801, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x1, 0x3, {0xa, 0x4e22, 0x4, @empty, 0x2}}}, 0x80) 20:48:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000001f00", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:29 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x3e6) r2 = semget(0x2, 0x3, 0x0) semctl$GETZCNT(r2, 0x2, 0xf, &(0x7f0000000440)=""/4096) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000002ec0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000002c0)=0x100, 0x308) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x0, r3}, 0xfffffeea) getresgid(&(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140)) dup3(r0, r1, 0x0) [ 1036.282951] input: syz0 as /devices/virtual/input/input280 20:48:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae77, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1036.342895] input: syz0 as /devices/virtual/input/input281 20:48:29 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x561b515c4778a8ec}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') preadv(r0, &(0x7f0000000000), 0x0, 0xfffffffffffffffa) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x7, {0x5ced4279, 0x1, 0x7, 0xe, 0x3fe, 0x5}}) readlinkat(r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)=""/158, 0x80309bb97f8a40d1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0xfb, 0xfffffffffffffffd, 0x2, 0x10001, 0x189d, 0x0, 0x8001, 0xfffffffffffffff8, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r1, 0x1000}, &(0x7f0000000240)=0x8) 20:48:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000001f00", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1036.634036] input: syz0 as /devices/virtual/input/input282 20:48:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000001500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1036.680775] input: syz0 as /devices/virtual/input/input283 20:48:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000a00)=ANY=[@ANYBLOB="000086740000f88d"], 0x8) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r0, &(0x7f0000aacfe4), 0x1c) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) [ 1036.822446] input: syz0 as /devices/virtual/input/input284 20:48:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(r1, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) [ 1036.871872] input: syz0 as /devices/virtual/input/input285 20:48:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e652e0f29f0260f0f2390f20f219a66b9ac0a00000f323ef20f1a5b00ba4100edfe47070f210866b8000000000f23c80f21f866350800f0000f23f8f3a5", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f00000001c0)={{0x5, 0x7fffffff}, 'port0\x00', 0x6, 0x800, 0x3, 0xc12, 0xfffffffffffffffd, 0x8000, 0x0, 0x0, 0x3, 0x610}) 20:48:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae41, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000001500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:30 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) 20:48:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') ioctl$TIOCNOTTY(r2, 0x5422) futimesat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}, {0x0, 0x7530}}) sendfile(r0, r2, &(0x7f00000000c0), 0x9168) fchdir(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000240)={0xa, 0x4, 0xfa00, {r3}}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) [ 1037.194018] input: syz0 as /devices/virtual/input/input286 [ 1037.296549] input: syz0 as /devices/virtual/input/input287 20:48:30 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) 20:48:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000000500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000200)=0x80) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x80) openat(r3, &(0x7f0000000300)='./file0\x00', 0x80000, 0x28) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r4, &(0x7f0000000080)=0x142, 0x9168) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000000c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x4, 0x1, 0x9e2, 0x7fff, 0x10000, 0x3, 0x1, 0x8001]}) dup2(r5, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1004000000016) 20:48:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae2e, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1037.548335] input: syz0 as /devices/virtual/input/input288 [ 1037.580999] input: syz0 as /devices/virtual/input/input289 20:48:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000000400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:30 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) [ 1037.770926] input: syz0 as /devices/virtual/input/input290 [ 1037.834923] input: syz0 as /devices/virtual/input/input291 20:48:31 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80001) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xfff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x3}, 0x2c) write$P9_RMKNOD(r0, &(0x7f0000000080)={0x14, 0x13, 0x1, {0x80, 0x1, 0x4}}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0xfffffffffffff000, 0xe, 0x0, &(0x7f0000000000)="24e0708f71bbad850edf3c86955d", 0x0, 0x4000}, 0x28) 20:48:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) r6 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@remote, 0x4e24, 0x4, 0x4e22, 0x5, 0xa, 0x20, 0x80, 0x73, r5, r6}, {0x4, 0x9, 0x5, 0x4, 0x0, 0x5, 0xfffffffffffffff7, 0xffffffff}, {0x42e, 0xfffffffffffffffd, 0x1, 0x9a37}, 0x1ff, 0x6e6bb9, 0x2, 0x1, 0x3, 0x3}, {{@in6=@mcast2, 0x4d4}, 0xa, @in6=@ipv4={[], [], @rand_addr=0x3}, 0x3501, 0x1, 0x0, 0x200, 0x1f, 0x1, 0x9e}}, 0xe8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400600, 0x0) tkill(r1, 0x1004000000016) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000340)={@local, r5}, 0x14) 20:48:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae38, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:31 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) 20:48:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000001200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"], 0x4a) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1038.159179] input: syz0 as /devices/virtual/input/input292 [ 1038.189910] input: syz0 as /devices/virtual/input/input293 20:48:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00\x00/\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000001c0)=0xffffffff, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r1, r3, &(0x7f0000000080)=0x142, 0x9168) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x1f) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1004000000016) 20:48:31 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) [ 1038.424992] input: syz0 as /devices/virtual/input/input294 20:48:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae25, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000140)) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14, 0x800) getpeername$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'nr0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000800)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000900)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000940)={@local, @local, 0x0}, &(0x7f0000000980)=0xc) accept(r0, 0x0, &(0x7f0000000640)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@ipv4, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000ac0)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b00)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b40)={'veth0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000010c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000048}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x444, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x1ec, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x668}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xf6e3}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r9}, {0x1f0, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x444}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="f6efbd5b", 0x4) [ 1038.500852] input: syz0 as /devices/virtual/input/input295 20:48:31 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) 20:48:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() fcntl$setsig(r0, 0xa, 0x21) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) 20:48:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae18, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={"6e72300100", 0x1132}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bond0\x00', 0x400}) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x100) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000080)={0x0, 0x401, [], @bt={0x2, 0x6, 0x7ff, 0xffffffffffff683d, 0x94, 0x1f, 0x4}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)="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") ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000016c0)={0x5, 0x0, [{0x0, 0x1000, &(0x7f0000000500)=""/4096}, {0x1000, 0x6a, &(0x7f00000001c0)=""/106}, {0x0, 0xae, &(0x7f0000000240)=""/174}, {0x3000, 0xe4, &(0x7f0000001500)=""/228}, {0x4000, 0x93, &(0x7f0000001600)=""/147}]}) 20:48:31 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) [ 1038.801694] input: syz0 as /devices/virtual/input/input296 [ 1038.836112] input: syz0 as /devices/virtual/input/input297 20:48:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000300", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:32 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) [ 1039.094294] input: syz0 as /devices/virtual/input/input298 [ 1039.131161] input: syz0 as /devices/virtual/input/input299 20:48:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0x5421, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1039.220126] device nr0 entered promiscuous mode 20:48:32 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) 20:48:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000000000000000200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1039.443324] input: syz0 as /devices/virtual/input/input300 20:48:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:32 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x4, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 1039.605848] input: syz0 as /devices/virtual/input/input301 20:48:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000000000000001f00", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r3}}, 0xc) sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) 20:48:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:34 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 20:48:34 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x7ffc, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000080)={{0x4000000, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x5, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000000)=["4c65746831812d2900"], 0x9}) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000580)={0x1}) 20:48:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1041.954595] input: syz0 as /devices/virtual/input/input302 20:48:35 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087705, 0x3) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x2, 0x2}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f00000003c0)) r2 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x5, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lseek(r1, 0x0, 0x3) creat(&(0x7f0000000240)='./bus\x00', 0x0) syz_open_dev$dspn(0x0, 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000400)=ANY=[@ANYBLOB="0400000000000000000000000000000000000000000000000000000000000094a7c99a0000000000000000000000000000000000000000000000000000000000000000000000000051ecaa0e126b60d4e0e30ef3f3cfddecb5ebe2e0d231804675e16b1295da8f4b3238ce8d83aafc2ba231fc34ecf047878a5af8ca3ac022c45587fc2ccb9b93658b5aefbf3b59ee16a7e23931fa050fba2d436f7cda3eedfc0a67ac81f6d8a6a38bc7dd994b0a9b8a7a20383b19b5d5c1edf67758e3296cc178209edebc47b76b4189e2c9df4fe4a7605f7f6595788e1188875bcae4"]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f00000000c0)=0x44, 0x8080fffffffe) syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x4, 0x801) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000040), 0x13f, 0x1002}}, 0xffffffffffffffae) dup3(r2, r0, 0x80000) 20:48:35 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 1042.056952] input: syz0 as /devices/virtual/input/input303 20:48:35 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 20:48:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000001400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r0, &(0x7f0000000080), 0x9168) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) [ 1042.414398] input: syz0 as /devices/virtual/input/input304 20:48:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 1042.502864] input: syz0 as /devices/virtual/input/input305 20:48:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) wait4(r1, &(0x7f00000000c0), 0x20000000, &(0x7f0000000100)) [ 1042.556143] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 1042.582273] FAT-fs (loop5): Filesystem has been set read-only 20:48:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000001100", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1042.633590] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 20:48:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae2f, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1042.720966] input: syz0 as /devices/virtual/input/input306 20:48:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 1042.870575] input: syz0 as /devices/virtual/input/input307 20:48:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'tunl0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000280)={0x0, 0x0}) r1 = socket$inet6(0xa, 0x4, 0x4600000000000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000001c0)={r2, 0x1ff}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"76657400000000000000000400", 0x43732e5398416f1a}) 20:48:35 executing program 4: r0 = getpgrp(0xffffffffffffffff) tkill(r0, 0x31) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x33, 0x1}, &(0x7f00000000c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r1, r3, &(0x7f0000000080)=0x142, 0x9168) socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1004000000016) 20:48:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 20:48:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00/\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)=0x1200000) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x31) 20:48:36 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 20:48:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae56, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1043.179314] input: syz0 as /devices/virtual/input/input308 [ 1043.243365] input: syz0 as /devices/virtual/input/input309 20:48:36 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000240), &(0x7f0000000280)) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100)=0x2, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000040)={{0x80000001, 0x6}, 'port1\x00', 0x8, 0x10000, 0x6, 0x800, 0x6, 0x8001, 0x6, 0x0, 0x6, 0xaeb}) r1 = getuid() write$P9_RLINK(r0, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r2 = accept$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001600)=0x14) sendmsg$can_bcm(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x1d, r3}, 0x10, &(0x7f0000001700)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02000000020000000180000000000000de8decfe28220ad91f3e7f30eb130cc1c54c94161a", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000e001000000020000e0350100003ad28d6c441915e8a134cbf05b53186cf5030f4420942cab60cc266b2fda33006c1241d22e1e87a88446cfc95741aa7bf051bfc54ce2aaadff10ab0d885c98d2"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x4000) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() setuid(r4) fsetxattr$system_posix_acl(r2, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x1}, [{0x2, 0x0, r6}, {0x2, 0x2, r1}, {0x2, 0x4, r1}, {0x2, 0x3, r6}, {0x2, 0x5, r4}, {0x2, 0x1, r6}], {0x4, 0x5}, [{0x8, 0x2, r5}, {0x8, 0x0, r5}, {0x8, 0x4, r5}, {0x8, 0x2, r5}], {0x10, 0x3}, {0x20, 0x6}}, 0x74, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 20:48:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 20:48:36 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 20:48:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000000000000000400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3400f}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x31, 0x829, 0x2, 0x0, {0x3, 0x8a060000}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000000}, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0xda141ec646778f36, 0x55) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0xab7, 0x260, 0x88bb, 0x401, 0xfffffffffffff800, 0xfffffffffffffffb, 0x10000, 0x6, 0x6, 0x1f, 0x82b, 0x5, 0x3}, {0x1ff, 0x4, 0x9, 0x3f, 0x5, 0xbd7, 0x3, 0x2, 0x400, 0x1, 0x7fff, 0x5, 0x5911}, {0x56e8, 0xfffffffffffffff7, 0x4, 0x4, 0xfffffffffffffff9, 0xfffffffffffffff8, 0xfffffffffffffff7, 0x3ab, 0x3, 0xc5, 0xb2c6, 0x8, 0x4}], 0x400}) 20:48:36 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 20:48:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae43, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x7bb8, 0x6, 0x7633}, &(0x7f0000000140)=0x2) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={r3, 0x5, 0x9, 0x8}, &(0x7f00000001c0)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r4, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f00000000c0)={0x4, 0xfffffffffffffff9}, 0x2) [ 1043.684060] input: syz0 as /devices/virtual/input/input310 [ 1043.754250] input: syz0 as /devices/virtual/input/input311 20:48:36 executing program 5: r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000240), 0x2) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000040)={0x3, 0xc431}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x404000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendto$inet(r2, &(0x7f0000000000), 0x0, 0xc0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000140)) 20:48:36 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 20:48:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') write$P9_RCREATE(r2, &(0x7f00000000c0)={0x18, 0x73, 0x1, {{0x10, 0x2, 0x8}, 0xffffffff80000001}}, 0x18) sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) 20:48:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000000000001000", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae26, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1044.139861] input: syz0 as /devices/virtual/input/input312 20:48:37 executing program 5: mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000100)={r1, 0x2}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x6) select(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000380)=""/169, 0xa9) 20:48:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 1044.229073] input: syz0 as /devices/virtual/input/input313 20:48:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000001100", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f00000000c0)={[0x2000, 0x5004, 0xf000, 0xf000], 0xfffffffffffffffe, 0x10, 0x8000}) [ 1044.401851] input: syz0 as /devices/virtual/input/input314 20:48:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 1044.497419] input: syz0 as /devices/virtual/input/input315 20:48:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae72, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00\x00\x00\x00?\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 20:48:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000300)="7acbb08355075f991c263db18fd3ab22f710cefaed31cade6ff5de0ebff28cd5424a67c6955f21c73301ffcb0b8299a6335969a44bd01a2e685674120da361a133edea314d2e72395c631fd932eaf418468afd93cd7c0854", 0x58}, {&(0x7f0000000380)="0b326a75ed063596eb6ae8eee595df405ec75719de6135c6", 0x18}, {&(0x7f00000003c0)="54efd8490358bc637b9f6132791c7396d825164e72088d9c0df855c4c35bef017db2320afb1254a34241f366fa69e0e373dc2850457b59f162e18c5b8d8a7ed6441325b9142e56f6a126cec2aacf7e77c93ae6e96de9e743ef79d962dfa3a3d43beb498554d05b0dcc8a357760252f6306767693ca055dc29f6099831ad7d2384de38e48f21704a4a4ce137ed823400588f867a2c443209aa660035bf983bed459496c768243a06a631f47660e81ad602d2d762ef5c92c22affce8bcd5", 0xbd}], 0x3) mq_timedsend(r2, &(0x7f00000000c0)="ce62740b069665359f484c7fd7c1c09dc4584a511dc1b20c56e66ccc22fda5cb139538310c281a2ca111", 0x2a, 0xeaee, &(0x7f0000000100)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000540)) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, r5, 0x105, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6b9cbed3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb0}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004}, 0x4) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000580)) [ 1044.675686] input: syz0 as /devices/virtual/input/input316 [ 1044.697301] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 20:48:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 1044.794857] input: syz0 as /devices/virtual/input/input317 20:48:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae35, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000001c0)=0x200007, 0x4) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/13, 0xd}}], 0x1, 0x0, 0x0) 20:48:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000000100", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:38 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 20:48:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000200)={0x5, "c694a58b160b5160f76930952a85f763fccab4cb1a9e6323fa1b8d01955ce1bb", 0x1800, 0x3, 0x1, 0x4, 0x2}) timer_create(0x4, &(0x7f0000000140)={0x0, 0x16, 0x2, @thr={&(0x7f0000000540)="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", &(0x7f00000000c0)="fa9d2238afc46bdb5fd0d82182e298b59e8109842e97d3498b2cbaae7598f61da14944753ddfc008b3910716e3b69009a1b46e97a41a10e02e9f9f14f4830b016ee0bfe2079a3047371b33ecbb3223a3db4dc40b3dbaf9324404c8b37d7f88dc57c7a42fdde138e21efc68"}}, &(0x7f0000000180)) write$P9_ROPEN(r2, &(0x7f00000001c0)={0x18, 0x71, 0x2, {{0x0, 0x2, 0x6}, 0xfffffffffffffffb}}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1044000000015) 20:48:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae51, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1045.253028] input: syz0 as /devices/virtual/input/input318 20:48:38 executing program 5: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=0x9, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) io_setup(0x0, &(0x7f0000000540)) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) eventfd2(0x1, 0x80000) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x801, 0x0) sync_file_range(r1, 0x100000000, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000240), 0x8000) ioctl$LOOP_CLR_FD(r0, 0x4c01) socket(0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x29, 0x6, 0x0, 0x0) [ 1045.313117] input: syz0 as /devices/virtual/input/input319 20:48:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae27, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:38 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 20:48:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r3, &(0x7f0000000080)=0x142, 0x9168) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r0) timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) [ 1045.602316] print_req_error: 122 callbacks suppressed [ 1045.602375] print_req_error: I/O error, dev loop3, sector 0 [ 1045.614010] buffer_io_error: 120 callbacks suppressed [ 1045.614116] Buffer I/O error on dev loop3, logical block 0, lost async page write [ 1045.619802] print_req_error: I/O error, dev loop3, sector 8 [ 1045.632996] Buffer I/O error on dev loop3, logical block 1, lost async page write [ 1045.640793] print_req_error: I/O error, dev loop3, sector 16 [ 1045.646721] Buffer I/O error on dev loop3, logical block 2, lost async page write [ 1045.654730] print_req_error: I/O error, dev loop3, sector 24 [ 1045.660819] Buffer I/O error on dev loop3, logical block 3, lost async page write [ 1045.668781] print_req_error: I/O error, dev loop3, sector 32 [ 1045.674822] Buffer I/O error on dev loop3, logical block 4, lost async page write [ 1045.682661] print_req_error: I/O error, dev loop3, sector 40 [ 1045.688732] Buffer I/O error on dev loop3, logical block 5, lost async page write [ 1045.696653] print_req_error: I/O error, dev loop3, sector 48 [ 1045.702631] Buffer I/O error on dev loop3, logical block 6, lost async page write [ 1045.702802] print_req_error: I/O error, dev loop3, sector 56 [ 1045.716902] Buffer I/O error on dev loop3, logical block 7, lost async page write [ 1045.734620] input: syz0 as /devices/virtual/input/input320 [ 1045.854858] print_req_error: I/O error, dev loop3, sector 64 [ 1045.861060] Buffer I/O error on dev loop3, logical block 8, lost async page write 20:48:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f00000003c0)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000000c0)={0x3, 0x3, 0x4, 0x70000, {}, {0x7, 0x2, 0x101, 0x7, 0x1, 0x100, "2b880c9c"}, 0x1ff, 0x5, @offset=0x2, 0x4}) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}]}) r4 = dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r2}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000200)={{0x4, 0x1, 0x7fffffff, 0x2, '\x00', 0x7}, 0x4, 0x4, 0x3, r1, 0x5, 0x7, 'syz0\x00', &(0x7f00000001c0)=['\x00', 'net/tcp6\x00', 'net/tcp6\x00', 'net/tcp6\x00', 'net/tcp6\x00'], 0x25, [], [0xfffffffffffffff7, 0x7, 0x0, 0x8001]}) 20:48:38 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 20:48:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000001500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x10000, 0x40181000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0xb, 0x1000, 0x0, [0xfffffffe]}) close(r0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'bridge_slave_0\x00'}, 0x18) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) mknod(&(0x7f0000000100)='./file0\x00', 0x103f, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x81) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$P9_RREAD(r0, &(0x7f0000000340)={0x100b, 0x75, 0x1, {0x1000, "c2ee5654f88b0270b0c1c392f10f347c861c495bdee46eeb48c0132af530346759a99d237ff4c352903cd1ab6dd72180123d2a0a33eebc1a37bd9113edbbf4026b3fddd3d76bc8f6557a3999bed09f189856fd160a899660e4110699392b8cfe0c424426701063126bc0e9abca394fee66dbaa63132cffd2d2c8875bfb0831d573eaa7f55abbbd9b36d436ad2aa19274214f59c2e5811e42834bc335e5ed9c984c896cc894ae400d1039f1355fb9719b4da3b3c13e696b7081fdebd6609f980fcf5a4f27d4eec457414d7d85f0ffdafa0763ab94db37c84c9b24efb41da015e72ffaf2502f5f0415ab10f5a9e1b7ee3aae54ae3146cd1b5ef351877fd4854687884a373fd2260fa716336e332e000bbf162d54b059b34b1fc9c66a2f9064a0615a90014e8ecc798d54db4df06a47a2f37d942d19ade279fa5e12cec9e22a22651c8a28764ee91ccb4280ff896c9468b07f58bc2c3eeda6d5e7b606a42557de02a269d4c1e25944660bd122ea2b7b6f4e1c5ede2444ec5628bed45dc1c038f123c50ec60a53428c36d6e59d233affde8259f07fd75256dee58c18b1ebcd03f768355d38b5c10ec3207a0b091f09d1a154f7f5e2b7afd447499bf08b085ffd4697d0acf84b02d353a7116c20c3fab67515b0a28a7629c25dd2c171d39332ff385964c123f9f607c8825e5feb4e04861e78097d604a5bdeaf74983b18f1be9fe7e6d21f50ec2762459f1ea66dfca8cbde08833fafa37980129a458b605d49d85be934da37f726872ab1f95c96bc081cd4138b8d1139062cc2a2c56730bff91a47c0b04ed49c739725d2410462f31f1f5b3e3c0b02ef8dd98fe668a20bd08682222b9fd5acb4b7415d5796ab49f8b459d3651febc4b2a650448c261efc171b60e3c8f8ba825d18083fe6659080cb99e1b80460f019f9f80f5dc4f468f88adf2f024ac136c457431b4d345fc5b26fbb6d1c8fbe3373433f576fa83281a4434b95d0ae973b1c52c712e6b30a859b5542aeecac737a0f0c7801a6257099c81bcc2c8be8005797e431e75d93a7f71ffe34c4745aa8bd83087b154a4bce2195d13ba11f6b027645f4f89bebbfad8a7077ab303a358986e08f5693d2c79c0a7dce9c40dbae62d36684913ed854e7c211515c24d2634ce06f122eefd4c6d6e911b45c1d03030e7ede41990b426eb3ba111176e854f5145f7f1a698ef51924c884377865a7e489744bd5169c80a619d6d539d192413958f38606680361271e01dad95c54bb2ef62039537f20de9968730f675ebd53605c25d32f4092029ef8335962f5bb47d48e896668e315da9f44f4f1651e47df81a27d620245eaf034eb656ad8c69a6fbef893f4569c83bd7a7a546bcfbebae3ec0c755f603f1d3ba58868475b8d33d2b2bb3984624f05387c0b0dbc031baaaee4d8802fe93b10cceaac58e2ed022b2da9b7e17345173e35c456d8419ea3ddf51660e42df5c940e487af3993d075f1c70ae182d2e262aa3ae433bdce778411568b51ec499047ee1099c6bb554451957d36246fda661af6713226c137163a7a960c806ec8391f487fdaaacbaccfb05dcf2715654ca67caf2d14c091c52c02576d2a233917c5552937c63279341f112d7b761390eaad8e93b45a84b4bde2f5316847bb075a407f42c2a30198320981a57d04af30c146c6666544a25b27798251fa84e09179f34173fb42414fc477e741727e574f321944a34287df345e1e3199ff8fa9bd469ba7e110e399776b8630a282dca68fd278697f04a0350833e03d463832a2d4337d72adc92ce403989b321ef56f1b9dd8720488452bb05fc79e5a1ebbebdc2b24b29c86e76745fb1b8d34738b8d517d37f407b0f3ef0d4a8ed57e619e3b85f18f4ae408d0ab7efcd89aa30ffa57e2e9d17b77a482b890e5b98909c5ef25f4a878557c65424054bb9273b75ae69882c663c1d40b082d641b4357ffea9359aef5f4a3394f76ca1e3d60616ddd06cffd89bda9032d7d1e8843cb9044e490c75683a3199c62598a4396681900f83476c59948f34bc1b0755e12aaa9f1d69b92642e4b2ad5bc7f890d2692a0df293583f82c678f90c21914191789960a297acb72de569a1da5ca6088b90ebb73edc8f5afe310c5bb857a7857a8deca448402df0179be120b6c1dfcd48f6b299c851bc7bc083d17924d4c0e20d668b6e311a097ed7d9f1d5df5bd30911a378d38caddb47ed181c1365a0061bcb1cada47175f9802b1de771242557b5754a61c08501359740954de4f1c85dbb83bfff44552f4d3d711d30c8b438f2f1073d2bcb5366ea70768ed8f94b229981896593550ad70467db0bc2d01b993b766f7ebb849c7f575db80d7564d7434a987edb5e473c36958bc4619049814c744d9de881c26c11bb53730eabe100e957f4c7baca3949605b5e58dd2673cca9c5b410ae15b07c0feb0f7b1d5c8d903d0401bd25294f84c5459bd10f1bdb8c7894b8e4d379ac3859f8e5c5c8be42ed1004e14459c03ecdc3483fc09248f077d287b118ab26070c188b110c2bf857970b0bf57fb08ed7a9709fc5936fc7e8a8d908e5de54e50f75690f7e72097e4c09f7c9c65ef39692738598771c46c29a2463d9ad82737fb7ccaf40627d52a47f616e38b848b35e3634183b52ea787c68b18486ade50d732123ac20f70af84d895d16f3f8ed7112cda71214ad32c1a8a157b1a6f9333238da9dc3ac2c4b5a5c3ddf5a8a002f5cd6a19e7027a666acabb5f1d1fb2a6608759f46d1a4b418dc191a91bcc5729936892e115e70f5eaf856623524eea3bdeee63fd7b2e887c494ea67244f801768462e1469a19aca6ec540f1850cdee7e7b34bf72ff1c51e27abaf5ea36e6118f5ade7b7e544df51100762847885c44e47d5f9cfc2052f91c44fd6f51b8f3878ebc33a3360c54ede05bed9541f9fabde6e99ce717b01b0228c0c58d41a4a2a9a6e77b5879712202d63dbbb4898aff045673aaac57ef2d096b818927ae1dbf9543b7f27b7f7fa9f57fe6e835b31313b71aefb4d2687e0840be6bbf1913d82669404707ba43b2d2af8d10cde1cd52020059c6654af6b825a01b55ed51e416ddd6205e0e6ba509743c73a22cb706327100f5a811d6bb2d417784ba491ad8e5f8d8eda655cdabe840f25d149a4dd4384addcbfb4f1dc84fbdef774c3f19194deb678195143f106ec2ac383876506006fb5ef9623daba93b0ff52c7d43a1844cfa55db335fa783db57d998fc7f520ab27ac0f01876043d990a8525fcbe8636dc07a8bf9121f43302d63887efac393aee13349170173a6434bc4c9fb624c7981139158f387e94346b09d8131a7d7e54caef31f7dd813ede18ff7e5e6121e98689d9144af27796888b732a138f1191a5d799d11ff517623d0831bab83f6c61a664d36bb322dd2f69727a6276bbea49a7a367844f8f98ff10d3aab9cf24f48d8149ef67ef932f8d82503f9764887e909822b0b5fd58598a35990f9c129dea23cee9bdf58b2b8b75173fe36f1f0b81d5332150d729c5d867076df8b1a2e1ed2f1f4377d9b4dc282a8fea9a901b92d6549433bd7e9ba523bd1b4b308661ddfc534609a6fe54c6cc5693acb57660f739a2bfa3ffa0b5638d53159e2798665a8d286dd709a45358aa571a25a96834aa63e2d984c74387aef41f6f628b5282d6951f7e33ef89b8f3515dd57ee06338f3c63c176500b790c4f8f19351bdeb53cd1068b43adc7f8bd65900932b0d117ed58a6871e3cebe92a98f74b7db85906e10ff6249985e278d53994e6e92f51115a5d5ad5aa021b9554f0af5df8574a3223c482ced494d0e6bcae7117133d581f68ad87d18814e45db9a3f867daf59aa19eeb02cad57b7f36df0d4d909df8f8f82fad39e37e2a0d8e540fdf4f3207fa2dbde2595ae5a8a901f307f1b1ada1d85c16fc3ba822144d19f1a261fe2b48ab6e608e4bb6a7109dedda910c9c78f88a4288e950286b7099ca6669c8884d4233a31aa111288b77bed460a30383c569185ad01a86260b8b4d4a0a37672a7d81421b573c47c30c4ec48d89bee058d310ec48bf826f6257a92e9ebf59ffa98e4730de07b954a8811bbdcebf06b7ccdeb2a55e8d21f1b1a2ffacc9701db969a9db0330e3d5bc045798b8e4fb39ec2778d140d7f1b4a3a515dccef97a48efd832bde94c83a6d6dbf93b5b1f2d4e43e61e85d87be9fba9cf7dd7b45eced09c52970b134e218745f07f19598375331c812f0d96d3a2a8055044629d6e9845212e13a9947cfee5c79020a4e54fac26f67666e82f65dc627cc3915dfd91fb72f90efc593eda9b5fc450471883464cfa7a86f224cef3f64987cdd1a27073637344663d62b9a4113b164eb44ad95c732dbb4c767444245b27f4433d88fa5b21e7238a6340733669a31c7a6d89169b1c8ce055d42692fb38bc859afed4387edfb590951beb76fa2884c6cffcc78e6afb84c32a64e5bd4041a1e54ed87b270407844811af48391af75fa8df224d34e254259f6bc4405e5de712035450cbc123d44d20d2402e096e3153ac96d40e785e3e902637c648e16888e7685d3c04b4675ebc5788f1ed4b055cf086fd7d35d061b45ee9cf1378230096c81e542d6af2842c7c7e8a39880487e398dc9ed626eb72a82d3c1a4d74cafeda49cb61923c4a3a404b84fecdb12a432a5f2151686244ba407c9a1c3c5468a78823314c653b664cea4552558c9cd65ddef9146d4940e94f70b103d25f266ae9514b1e8478c1c93d6c526cfd447091f206b472e9ebe69afd5313a8d12c3b9c8a32a55b3e8eaaa3183d8e8b1bae7f84f38974632cbb9cb2130fec52099d962e0fd388ad22408681e4c4c40d006ca898c7e162ca60c6974f87b70b180d7ac7a319257d85b45a6f974f29bb501ced065bb59a2ed50f9315595ae2b4a603f32c76c8e090b6043ff29d37a83e39b48ef716f911dd8ff968e9c3637e1689264b973bc8375ea229ed2a0f508f7dc883aa26a906e652dc75ece64ffdbe0893f76b8a5ff64c873de27b952055bb88056ec826c14e95a125c4acfd4b677884319374a63d144ed42e9f391cc1038aecdf21175fa29a3ece23a065cebeeb7ff6d67163236078f5d44958cfd6bf8194a1df178bf39369df18eb3f295e01756462d8c3e573e67e5483780447d98896605c22a53a6b1637ea06f5925711e0f002b8158d306d638b3d114244df2c10258644428f7c574a4f4af9c7617d29e3051270008384b0ccf3efe5a607f9b0e2617eea957b5dfe0e0ccc31e7e34d70faa3dc0a112433700194621fb9d3d3db8439107359b1ff6a269f4db760a2cbbe5d98bc7b58aeaa3c4768ab071c68748ffddaf7b628387e74a23327e02dc467221c53762ed98cd408848028e9a72d41ae0a143aeedae41574e88149e92e01f0e3e36ee5e1cfcba7b98f4a35fe0e51c96164aa23d01d2370cfbb8a04c5c1abd5098e855274abf2a94a6039624d12410b6842eb57fe811ff967bb4401d2731f7fab4957aec0bc1c9c56e27db39a7a7d6b638841b0e951a6751fb700dd85e4e0768c83c902fa685ef993029e6b1b536acdbd5edb45550d922a06bb4274517e8b85c87b90d69a26a1a5e7409b9a597e303336674f677f7d54f426a2d3a862cf91ee84ae458517cbc1b6fa7830b21770768df08938225715bfa3c8638b18d54c657095ee9415628cf7481d7a0a17fae9b1295da3226cc98bc55732f428cb7577d2ffb417b4e60fb392f0119dd7b0ada488340e61361ec63bb6832fbe1ebf0de94a329b08fcc8e0f2ce009c4dd9220fed5e049e1b9b9d2f964ec2cea2a"}}, 0x100b) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000280)=""/105) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) 20:48:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae76, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1046.003373] input: syz0 as /devices/virtual/input/input322 20:48:39 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 1046.150248] input: syz0 as /devices/virtual/input/input323 20:48:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000001000", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:39 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) 20:48:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x6e9, 0x88180) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000400)) clock_nanosleep(0x7, 0x1, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x10000, 0x9}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000003c0)={r4, 0x6, 0x1000, 0x20, 0xfffffffffffffffc, 0x6}, 0x14) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r5, &(0x7f0000000080)=0x142, 0x9168) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r6, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x1c}, @broadcast, @loopback}, 0xc) tkill(r2, 0x1004000000016) write$P9_RVERSION(r1, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.u'}, 0x15) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) [ 1046.297914] input: syz0 as /devices/virtual/input/input324 [ 1046.357079] input: syz0 as /devices/virtual/input/input325 20:48:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000001400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae3e, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1046.545480] input: syz0 as /devices/virtual/input/input326 [ 1046.581883] input: syz0 as /devices/virtual/input/input327 20:48:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:39 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, 0x0) 20:48:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00\x00?\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='auxv\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r3 = gettid() ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000100)={0x0, 0x4}) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r4, &(0x7f0000000080)=0x142, 0x9168) r5 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r5, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) [ 1046.853392] input: syz0 as /devices/virtual/input/input328 [ 1046.888648] input: syz0 as /devices/virtual/input/input329 20:48:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000340)={0x2, 0xc0a, 0x3, 0x5, 0x3}) writev(r1, &(0x7f0000000780)=[{&(0x7f00000004c0)="22405e4fc251dfd47801eb5e22b8fbe9c3d315c8ebbc9298ca8ced21bd660c58a8fb126bdaa4e52454a1032a5b1b29549411fa47588a79e44abcba2304352c8da9507571077077b771b1ea1a7bcf62ccd225247b7b9c7887ee09be047d4562d1743a09c5b2a1b9190bb74d867e2095e926cb4f3ef5c56eb0c52b5927d4d10761426e40e717d6193e225869f7b8b1190fe2e5a199880e2092ea23d402ffa7f3694c4203e78e1cd15c6d419702292e238372b8b8082a2b91c5236d806f5de408b0a275da8341e6bf74967c", 0xca}, {&(0x7f00000003c0)="574dd7cffbfc3067b66e0d237d03ccca7dc4e9dd27a30336c04ad316f90ffced00b6172dab7e0f941b5d2a80ef6f6af8fd73dc297db862d3b2888df50fed0f315ed96083c38dbb6a7fa278bccd28351d4c4da1ed5af8e7ecfc7217c6800bd532bdfd880de818399dd29f9abacf8d0eec24e0987b6f4ba2ef2f41b16866ca4f3e6c8628feb628d4bf0fd840f402", 0x8d}, {&(0x7f00000005c0)="6b6993f5b9d6d9b128784d74a25f0fde9fe6cd859b8021ad6bfd41d21820f0f1997e09f2df71e722f9f8d425bca351fc2413728f7cf56ce036bf64237baae6b4d320c092ee0719a1f1ee29256d49465ef9e47aa1fdcf57aee5253045af97c0d19eb0fb24143866a43dc06bf74939192cb25738f32e2c310171e201efe4ddc4c7bc5967b44a05d678eaf655218569678833afc0cbc9178298d9eafb62e3871e29", 0xa0}, {&(0x7f0000000240)="f4bfcb7ce575643ee439c168cfe5295e073bf817d8476b55db211abd75be0aa2deb14efcb756dde7199bffd8ba7ee172b5571de417df712877d5bfc934fb6294678b9c1488881d9fab08cbd0063059baf0fd5de19566dbae6276c5f11da337a9685d06eb259fe35042df6003499b552c670b81c29544c042da61c4", 0x7b}, {&(0x7f0000000680)="f88ec897075bc6938f52e2d5427b0b1bed121aed26c9719bdd4390dfe0a78628b2bdc304eefcdc58ed31150d9626b516a0f3e6b66a82b51979dc32e471c78bc0ca59b5abc282f967fe31e7923516e06687d7c774522e2c12ee869751700eea34149aa6331644081aaf055a59dc9575e0cb3c4c56e48ee5987de179f588680e7b9cfc02ceb0a59e6a35573cfae5b14d4d527c34adc8f6a8763a88ac64a81f4dd896ccd3e2be3afd98bb02d2a3aea715c395d99ddae1b5b3256400641c68ca557f68bf9a585a53a461b2882287d2adcaeb138f3fe59b3130e5b39d8f1a73c3ce790d8237a85f30931ef4d1", 0xea}], 0x5) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) 20:48:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae34, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:42 executing program 1 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 20:48:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000300", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x2f9, &(0x7f0000000180)={0xffffffffffffb690}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r3, &(0x7f0000000080)=0x142, 0x9168) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1004000000016) 20:48:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000"], 0x25) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1049.075759] FAULT_INJECTION: forcing a failure. [ 1049.075759] name failslab, interval 1, probability 0, space 0, times 0 [ 1049.115935] input: syz0 as /devices/virtual/input/input330 [ 1049.143110] CPU: 0 PID: 6444 Comm: syz-executor1 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1049.151660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1049.161021] Call Trace: [ 1049.163630] dump_stack+0x244/0x39d [ 1049.167287] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1049.172503] ? check_preemption_disabled+0x48/0x280 [ 1049.177542] ? print_usage_bug+0xc0/0xc0 [ 1049.181621] should_fail.cold.4+0xa/0x17 [ 1049.185706] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1049.190825] ? print_usage_bug+0xc0/0xc0 [ 1049.194910] ? __lock_acquire+0x62f/0x4c20 [ 1049.199182] ? graph_lock+0x270/0x270 [ 1049.203003] ? debug_smp_processor_id+0x1c/0x20 [ 1049.207697] ? perf_trace_lock+0x14d/0x7a0 [ 1049.211977] ? __lock_is_held+0xb5/0x140 [ 1049.216085] ? perf_trace_sched_process_exec+0x860/0x860 [ 1049.221575] ? __lock_acquire+0x62f/0x4c20 [ 1049.225831] __should_failslab+0x124/0x180 [ 1049.230082] should_failslab+0x9/0x14 [ 1049.233897] __kmalloc+0x2e0/0x760 [ 1049.237539] ? ext4_find_extent+0x757/0x9b0 20:48:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x212}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) [ 1049.241890] ext4_find_extent+0x757/0x9b0 [ 1049.246070] ext4_ext_map_blocks+0x28c/0x48e0 [ 1049.250576] ? print_usage_bug+0xc0/0xc0 [ 1049.254671] ? ext4_ext_release+0x10/0x10 [ 1049.258843] ? graph_lock+0x270/0x270 [ 1049.262654] ? graph_lock+0x270/0x270 [ 1049.266469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1049.272011] ? check_preemption_disabled+0x48/0x280 [ 1049.277055] ? lock_acquire+0x1ed/0x520 [ 1049.281098] ? ext4_map_blocks+0x487/0x1b50 [ 1049.285445] ? lock_release+0xa10/0xa10 [ 1049.289425] ? perf_trace_sched_process_exec+0x860/0x860 [ 1049.294887] ? ext4_es_cache_extent+0x6a0/0x6a0 [ 1049.299579] ? down_read+0x8d/0x120 [ 1049.303208] ? ext4_map_blocks+0x487/0x1b50 [ 1049.307534] ? __down_interruptible+0x700/0x700 [ 1049.312210] ? __might_sleep+0x95/0x190 [ 1049.316204] ext4_map_blocks+0xe2d/0x1b50 [ 1049.320366] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1049.325916] ? ext4_issue_zeroout+0x190/0x190 [ 1049.330420] ? ext4_ext_index_trans_blocks+0x11f/0x150 [ 1049.335972] ? ext4_meta_trans_blocks+0x25f/0x310 [ 1049.340830] ext4_alloc_file_blocks+0x319/0xaf0 [ 1049.345512] ? lock_release+0xa10/0xa10 [ 1049.349488] ? perf_trace_sched_process_exec+0x860/0x860 [ 1049.354952] ? ext4_extent_block_csum_set+0x4a0/0x4a0 [ 1049.360162] ? down_write+0x8a/0x130 [ 1049.363891] ? ext4_fallocate+0x316/0x22e0 [ 1049.368128] ? down_read+0x120/0x120 [ 1049.371859] ext4_fallocate+0xa29/0x22e0 [ 1049.375926] ? debug_smp_processor_id+0x1c/0x20 [ 1049.380600] ? graph_lock+0x270/0x270 [ 1049.384413] ? ext4_insert_range+0x1410/0x1410 [ 1049.389026] ? graph_lock+0x270/0x270 [ 1049.392838] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1049.398471] ? check_preemption_disabled+0x48/0x280 [ 1049.403501] ? __lock_is_held+0xb5/0x140 [ 1049.407582] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1049.412605] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1049.418149] ? __sb_start_write+0x1b2/0x370 [ 1049.422488] ? ext4_insert_range+0x1410/0x1410 [ 1049.427078] vfs_fallocate+0x4b4/0x940 [ 1049.430983] ioctl_preallocate+0x1e8/0x300 [ 1049.435226] ? ioctl_file_clone+0x180/0x180 [ 1049.439565] do_vfs_ioctl+0x148f/0x1790 [ 1049.443551] ? ioctl_preallocate+0x300/0x300 [ 1049.447963] ? __fget_light+0x2e9/0x430 [ 1049.451945] ? fget_raw+0x20/0x20 [ 1049.455414] ? __sb_end_write+0xd9/0x110 [ 1049.459493] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1049.465036] ? fput+0x130/0x1a0 [ 1049.468320] ? do_syscall_64+0x9a/0x820 [ 1049.472299] ? do_syscall_64+0x9a/0x820 [ 1049.476298] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1049.480903] ? security_file_ioctl+0x94/0xc0 [ 1049.485322] ksys_ioctl+0xa9/0xd0 [ 1049.488817] __x64_sys_ioctl+0x73/0xb0 [ 1049.492712] do_syscall_64+0x1b9/0x820 [ 1049.496604] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1049.501975] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1049.506910] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1049.511763] ? trace_hardirqs_on_caller+0x310/0x310 [ 1049.516783] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1049.521809] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1049.526841] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1049.531701] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1049.536898] RIP: 0033:0x457569 [ 1049.540095] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1049.559011] RSP: 002b:00007fce7a97bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1049.566723] RAX: ffffffffffffffda RBX: 00007fce7a97bc90 RCX: 0000000000457569 [ 1049.573994] RDX: 0000000020000000 RSI: 000000004030582a RDI: 0000000000000004 [ 1049.581475] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1049.588749] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce7a97c6d4 [ 1049.596019] R13: 00000000004c08df R14: 00000000004d1268 R15: 0000000000000005 [ 1049.609732] input: syz0 as /devices/virtual/input/input331 20:48:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000001200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:42 executing program 1 (fault-call:3 fault-nth:1): perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 20:48:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1049.781333] input: syz0 as /devices/virtual/input/input332 [ 1049.813156] input: syz0 as /devices/virtual/input/input333 20:48:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000001200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1049.896190] FAULT_INJECTION: forcing a failure. [ 1049.896190] name failslab, interval 1, probability 0, space 0, times 0 [ 1049.908149] CPU: 0 PID: 6478 Comm: syz-executor1 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1049.916666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1049.926024] Call Trace: [ 1049.928628] dump_stack+0x244/0x39d [ 1049.932281] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1049.937505] should_fail.cold.4+0xa/0x17 [ 1049.941584] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1049.946713] ? mark_held_locks+0x130/0x130 [ 1049.950969] ? find_held_lock+0x36/0x1c0 [ 1049.955049] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1049.960599] ? check_preemption_disabled+0x48/0x280 [ 1049.965685] ? debug_smp_processor_id+0x1c/0x20 [ 1049.970455] ? perf_trace_run_bpf_submit+0x267/0x330 [ 1049.975575] ? lock_is_held_type+0x210/0x210 [ 1049.975597] ? perf_trace_run_bpf_submit+0x267/0x330 [ 1049.975616] ? perf_trace_run_bpf_submit+0x26e/0x330 [ 1049.975638] ? perf_tp_event+0xc20/0xc20 20:48:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000"], 0x25) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1049.975662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1049.985175] __should_failslab+0x124/0x180 [ 1049.985199] should_failslab+0x9/0x14 [ 1049.985216] kmem_cache_alloc+0x47/0x730 [ 1049.985239] ? __es_tree_search.isra.12+0x1ba/0x220 [ 1049.985261] __es_insert_extent+0x30c/0x1120 [ 1049.985287] ? ext4_es_free_extent+0x790/0x790 [ 1049.999972] ? kasan_check_write+0x14/0x20 [ 1050.017048] ? do_raw_write_lock+0x14f/0x310 [ 1050.017066] ? do_raw_read_unlock+0x70/0x70 [ 1050.017082] ? __lock_is_held+0xb5/0x140 [ 1050.017116] ext4_es_insert_extent+0x352/0xbd0 [ 1050.026100] ? ext4_es_scan_clu+0x50/0x50 [ 1050.026127] ? __lock_is_held+0xb5/0x140 [ 1050.026157] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1050.026191] ext4_ext_put_gap_in_cache+0x15f/0x1f0 [ 1050.026208] ? ext4_rereserve_cluster+0x240/0x240 [ 1050.026228] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1050.026256] ext4_ext_map_blocks+0x1d92/0x48e0 [ 1050.080851] ? print_usage_bug+0xc0/0xc0 [ 1050.084936] ? ext4_ext_release+0x10/0x10 [ 1050.089096] ? graph_lock+0x270/0x270 [ 1050.092906] ? graph_lock+0x270/0x270 [ 1050.096715] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1050.102259] ? check_preemption_disabled+0x48/0x280 [ 1050.107306] ? lock_acquire+0x1ed/0x520 [ 1050.111286] ? ext4_map_blocks+0x487/0x1b50 [ 1050.115623] ? lock_release+0xa10/0xa10 [ 1050.119601] ? perf_trace_sched_process_exec+0x860/0x860 [ 1050.125060] ? ext4_es_cache_extent+0x6a0/0x6a0 [ 1050.129750] ? down_read+0x8d/0x120 [ 1050.133381] ? ext4_map_blocks+0x487/0x1b50 [ 1050.137709] ? __down_interruptible+0x700/0x700 [ 1050.142385] ? __might_sleep+0x95/0x190 [ 1050.146373] ext4_map_blocks+0xe2d/0x1b50 [ 1050.150533] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1050.156082] ? ext4_issue_zeroout+0x190/0x190 [ 1050.160581] ? ext4_ext_index_trans_blocks+0x11f/0x150 [ 1050.165867] ? ext4_meta_trans_blocks+0x25f/0x310 [ 1050.170726] ext4_alloc_file_blocks+0x319/0xaf0 [ 1050.175410] ? lock_release+0xa10/0xa10 [ 1050.179565] ? perf_trace_sched_process_exec+0x860/0x860 [ 1050.185025] ? ext4_extent_block_csum_set+0x4a0/0x4a0 [ 1050.190231] ? down_write+0x8a/0x130 [ 1050.193947] ? ext4_fallocate+0x316/0x22e0 [ 1050.198194] ? down_read+0x120/0x120 [ 1050.201923] ext4_fallocate+0xa29/0x22e0 [ 1050.205991] ? debug_smp_processor_id+0x1c/0x20 [ 1050.210669] ? graph_lock+0x270/0x270 [ 1050.214483] ? ext4_insert_range+0x1410/0x1410 [ 1050.219076] ? graph_lock+0x270/0x270 [ 1050.222885] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1050.228428] ? check_preemption_disabled+0x48/0x280 [ 1050.233471] ? __lock_is_held+0xb5/0x140 [ 1050.237556] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1050.242578] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1050.248122] ? __sb_start_write+0x1b2/0x370 [ 1050.252457] ? ext4_insert_range+0x1410/0x1410 [ 1050.257045] vfs_fallocate+0x4b4/0x940 [ 1050.260950] ioctl_preallocate+0x1e8/0x300 [ 1050.265199] ? ioctl_file_clone+0x180/0x180 [ 1050.269541] do_vfs_ioctl+0x148f/0x1790 [ 1050.273529] ? ioctl_preallocate+0x300/0x300 [ 1050.277943] ? __fget_light+0x2e9/0x430 [ 1050.281921] ? fget_raw+0x20/0x20 [ 1050.285389] ? __sb_end_write+0xd9/0x110 [ 1050.289467] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1050.295026] ? fput+0x130/0x1a0 [ 1050.298311] ? do_syscall_64+0x9a/0x820 [ 1050.302287] ? do_syscall_64+0x9a/0x820 [ 1050.306272] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1050.310865] ? security_file_ioctl+0x94/0xc0 [ 1050.315284] ksys_ioctl+0xa9/0xd0 [ 1050.318748] __x64_sys_ioctl+0x73/0xb0 [ 1050.322642] do_syscall_64+0x1b9/0x820 [ 1050.326544] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1050.331916] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1050.336855] ? trace_hardirqs_on_caller+0x310/0x310 [ 1050.341883] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1050.346905] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 1050.353585] ? __switch_to_asm+0x40/0x70 [ 1050.357649] ? __switch_to_asm+0x34/0x70 [ 1050.361721] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1050.366582] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1050.371774] RIP: 0033:0x457569 [ 1050.374975] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1050.393883] RSP: 002b:00007fce7a97bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1050.401598] RAX: ffffffffffffffda RBX: 00007fce7a97bc90 RCX: 0000000000457569 [ 1050.408873] RDX: 0000000020000000 RSI: 000000004030582a RDI: 0000000000000003 [ 1050.416141] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1050.423416] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce7a97c6d4 [ 1050.430690] R13: 00000000004c08df R14: 00000000004d1268 R15: 0000000000000005 [ 1050.440736] input: syz0 as /devices/virtual/input/input334 20:48:43 executing program 5: r0 = socket$kcm(0x10, 0x7, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffff, 0x206000) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, {0x6, 0x1f, 0x77a7, 0x5, 0xe0000}}, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100), 0x4) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000140)=""/163) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e00000019008100e00f80ecdb4cb92e0a480e181e0cd300e8bd6efb120009000803000000000000000000000000", 0x2e}], 0x1, &(0x7f0000000280)}, 0x0) [ 1050.505149] input: syz0 as /devices/virtual/input/input335 20:48:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x11) ioctl$TIOCSETD(r0, 0x5437, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x200800) 20:48:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000000000000001100", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:43 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 20:48:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae0b, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1050.732246] input: syz0 as /devices/virtual/input/input336 [ 1050.772881] input: syz0 as /devices/virtual/input/input337 20:48:43 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f0000000000)) 20:48:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) 20:48:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000000000000001200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae52, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:45 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020500000a0000000000000000000000030006000000000002000000e00000000000000002000100000000000000000000000000030005000000000002000000e0000001000000000000000000000000"], 0x50}}, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:scsi_generic_device_t:s0\x00', 0x2b, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x8001, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000001c0)={0xfff, 0x7, 0xb98}) 20:48:45 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305828, &(0x7f0000000000)) 20:48:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000"], 0x25) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1052.729956] input: syz0 as /devices/virtual/input/input338 20:48:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000040)={0x1, 0x3000, 0x7, 0x6, 0x5}) [ 1052.791622] input: syz0 as /devices/virtual/input/input339 20:48:45 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0045878, &(0x7f0000000000)) 20:48:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000001600", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae68, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1053.023947] input: syz0 as /devices/virtual/input/input340 20:48:46 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0045878, &(0x7f0000000000)) [ 1053.076476] input: syz0 as /devices/virtual/input/input341 20:48:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000000000000001500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1053.279443] input: syz0 as /devices/virtual/input/input342 [ 1053.310770] input: syz0 as /devices/virtual/input/input343 20:48:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x6, 0x7fffffff, 0x20000000000, 0xfffffffffffffffa, 0xd8}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000280)=0x84) tkill(r1, 0x1004000000016) 20:48:46 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x5452, &(0x7f0000000000)) 20:48:46 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @link_local, 'veth1\x00'}}, 0x1e) ioprio_get$uid(0x3, r1) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local, 'bond0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'veth0_to_bond\x00'}}, 0x1e) 20:48:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000000000000000300", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae0e, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd"], 0x38) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:46 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40049409, &(0x7f0000000000)) [ 1053.619631] input: syz0 as /devices/virtual/input/input344 20:48:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x19, 0x401, 0x0, 0x0, {}, [@RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x24}}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x20002) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x2, 0x4) [ 1053.678261] input: syz0 as /devices/virtual/input/input345 20:48:46 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4020940d, &(0x7f0000000000)) 20:48:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000000000000001600", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000180)={&(0x7f0000ffd000/0x2000)=nil, 0x7ff, 0x0, 0x14, &(0x7f0000ffd000/0x2000)=nil, 0x1000}) 20:48:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) fcntl$getown(r0, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000180)='\x00', 0xffffffffffffffff}, 0x30) r2 = fcntl$getown(r1, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000240)="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") ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000100)={0xa, 0x2, 0x80000000, 0x3ff, 'syz0\x00', 0x5}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:48:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1053.905594] input: syz0 as /devices/virtual/input/input346 20:48:47 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x5450, &(0x7f0000000000)) [ 1054.002657] input: syz0 as /devices/virtual/input/input347 20:48:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:47 executing program 4: r0 = dup(0xffffffffffffffff) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000009c0), 0x4) r1 = msgget(0x2, 0x20) msgctl$IPC_RMID(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r3 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x20012, 0x4}, &(0x7f00000000c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r2, r4, &(0x7f0000000080)=0x142, 0x9168) r5 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r5, r2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) 20:48:47 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x5421, &(0x7f0000000000)) [ 1054.231110] input: syz0 as /devices/virtual/input/input348 [ 1054.296134] input: syz0 as /devices/virtual/input/input349 20:48:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd"], 0x38) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0x5452, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:47 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0189436, &(0x7f0000000000)) 20:48:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000000000000001400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:47 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000440)=0x3, 0x4) mknod(&(0x7f00000000c0)='./file0\x00', 0x1480, 0x3d02) sched_setscheduler(r0, 0x3, &(0x7f0000000600)=0x9) clone(0x820002102011ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) futex(&(0x7f0000000080)=0x1, 0x200008b, 0x2, 0x0, 0x0, 0x1000000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000480)=""/154, &(0x7f0000000540)=0x9a) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x10800, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000280)={{0x2, 0x0, 0xffffffff, 0x4, '\x00', 0x1}, 0x5, 0xfffffffffffffffe, 0x0, r0, 0x5, 0x5, 'syz0\x00', &(0x7f00000003c0)=['posix_acl_accessvmnet0\x00', '^*md5sum,:self\'^nodev\x00', 'ppp0cpuset{\\em1\'security-\'\x00', '\x00', '(vmnet1wlan1\x00'], 0x56, [], [0x4, 0x3, 0x5, 0x7]}) write$P9_RSTATFS(r1, &(0x7f0000000580)={0x43, 0x9, 0x2, {0x9, 0x6, 0xff, 0x7f, 0x80000001, 0xe63, 0xd747, 0x401, 0x9}}, 0x43) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) tkill(r0, 0x23) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x40002, 0x0) accept$packet(r3, &(0x7f0000000100), &(0x7f0000000140)=0x14) [ 1054.578161] input: syz0 as /devices/virtual/input/input350 20:48:47 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x5451, &(0x7f0000000000)) 20:48:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000040)) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="080000000080000000000000000000e80f000000"], 0x14}}, 0x0) [ 1054.675533] input: syz0 as /devices/virtual/input/input351 20:48:47 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x5460, &(0x7f0000000000)) 20:48:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae03, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000000000000000100", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1054.988191] input: syz0 as /devices/virtual/input/input352 [ 1055.022223] input: syz0 as /devices/virtual/input/input353 20:48:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd"], 0x38) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f00000001c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r3, &(0x7f0000000080)=0x142, 0x9168) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r4, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000019) readlinkat(r5, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/45, 0x2d) 20:48:50 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x541b, &(0x7f0000000000)) 20:48:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000000200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae66, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:50 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000a00)='lo.\x00', 0x2, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x1000000000000248) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)={0x7ac1, 0x5, 0x4, 0x2000, {r3, r4/1000+10000}, {0x2, 0x1, 0xd54000, 0x1, 0x200, 0x3, "0213c286"}, 0x7, 0x4, @planes=&(0x7f0000000140)={0x9, 0x2, @mem_offset=0x9, 0xfff}, 0x4}) r5 = syz_open_pts(r1, 0x2) dup3(r5, r1, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f00000003c0)={0x0, 0x2}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) write(r1, &(0x7f0000c34fff), 0xffffff0b) [ 1057.342502] input: syz0 as /devices/virtual/input/input354 20:48:50 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x2, &(0x7f0000000000)) [ 1057.417833] input: syz0 as /devices/virtual/input/input355 20:48:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x7fff, 0x444201) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000100)="d8cd27fe0b286b2cce9b95b39f77434f5688620f78bb5a12e80877dea5dc5a5ff11cdd3a9ea731199fbef59c01fc57bdb4e74345ad41b77147f27b9d469ab04669e6a4760004fac8d21bd5deed5e03cd3d77ae17ef86eb1fb21483ac041a7650c9bc59760640c648f73ec0361e2e7ca75c88853d0264f1df0d12da72c5dbbb8301a40aa9af178cff8da25e32e859ca70f7f2ca61cee5583f4c32b9c513597b7b6b9f6cd09cc2dd82ed89b04bdd8c37534cfb61d2b4ad8697ead850da27b909d3728b804f19657ffd28032083e849511004fb07933d945341213639d3c7357547e3717315d4688e76c4383d91b15ebf14cd52701cfa82") ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000340)={[], 0x8001, 0x4, 0x4, 0x6, 0x5, r1}) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r3, &(0x7f0000000080)=0x142, 0x9168) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x31) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000300)={0x8, &(0x7f0000000200)=[{}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}, {}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}]}) 20:48:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d01"], 0x41) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:50 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xff4f010000000000) 20:48:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000001100", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd"], 0x38) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1057.673916] input: syz0 as /devices/virtual/input/input356 20:48:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae13, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1057.736635] input: syz0 as /devices/virtual/input/input357 20:48:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000180)={0x1, {0xb35}}) 20:48:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:50 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffb7000000000000) [ 1057.993022] input: syz0 as /devices/virtual/input/input358 [ 1058.044056] input: syz0 as /devices/virtual/input/input359 20:48:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae16, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x400500) 20:48:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000001600", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000280)=0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f0000000300)={0xffffffffffffffff}, 0x1, {0xa, 0x4e22, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x17}, 0xfffffffffffffffb}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f00000002c0), r4}}, 0x18) r5 = dup2(r3, r0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000140)={0x0, 0x200, [], @raw_data=[0x2, 0x40, 0x400, 0x4b, 0xffffffff, 0x3, 0x928a, 0x200, 0x400000000000000, 0x4, 0x81, 0x6420, 0x9, 0x1000, 0x0, 0x8, 0x8, 0x7, 0xe70, 0xbf, 0x8, 0x5, 0x0, 0x0, 0x400, 0x10001, 0x8, 0x5, 0x8, 0x3, 0x5, 0x200]}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'veth1\x00', 0x400}) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0), 0x4) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L-', 0x200}, 0x28, 0x2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) [ 1058.275823] input: syz0 as /devices/virtual/input/input360 [ 1058.314691] input: syz0 as /devices/virtual/input/input361 20:48:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd"], 0x38) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xb80500) 20:48:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000000000000000500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:51 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x6, 0x78a770a66716d6c5) accept(r1, &(0x7f0000000100)=@pppol2tpv3in6, &(0x7f0000000180)=0x80) timer_create(0xa, &(0x7f00000001c0), &(0x7f0000000000)) r2 = dup3(r0, r0, 0x80000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x80, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x3f, &(0x7f0000000080)=0x42, 0x4) 20:48:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae05, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1058.523272] input: syz0 as /devices/virtual/input/input362 20:48:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffbf) [ 1058.581337] input: syz0 as /devices/virtual/input/input363 20:48:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000001600", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:51 executing program 5: openat$autofs(0xffffffffffffff9c, 0x0, 0xfffffffffffffffd, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x6e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001180)={0x0, 0x0, 0x2080, {0x0, 0x6000, 0x3}, [], "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", "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"}) 20:48:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd"], 0x38) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1058.917503] input: syz0 as /devices/virtual/input/input364 20:48:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae46, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:52 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xd8050000000000) [ 1059.029681] input: syz0 as /devices/virtual/input/input365 20:48:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) accept4$inet6(r2, 0x0, &(0x7f00000000c0), 0x800) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) 20:48:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00\x00\x00\x00/\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:52 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000002c0)="310000001200e7ef107b0000e623000680a11d0de64f8652b2aa2a9c805bef90c0c9bf1d02d7be2f3233c951a642f3bfcb", 0x31, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000040)=""/14, 0xe, 0x0, 0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x301000, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x84, 0x1, 0x3}}, 0x14) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000000c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 20:48:52 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xe80000) [ 1059.306246] input: syz0 as /devices/virtual/input/input366 20:48:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae36, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1059.359121] input: syz0 as /devices/virtual/input/input367 [ 1059.438918] netlink: 17 bytes leftover after parsing attributes in process `syz-executor5'. 20:48:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x385) tkill(r1, 0x1004000000016) 20:48:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000001400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1059.493555] netlink: 17 bytes leftover after parsing attributes in process `syz-executor5'. 20:48:52 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000002c0)="310000001200e7ef107b0000e623000680a11d0de64f8652b2aa2a9c805bef90c0c9bf1d02d7be2f3233c951a642f3bfcb", 0x31, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000040)=""/14, 0xe, 0x0, 0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x301000, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x84, 0x1, 0x3}}, 0x14) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000000c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 20:48:52 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xff870000) [ 1059.560746] input: syz0 as /devices/virtual/input/input368 [ 1059.596397] input: syz0 as /devices/virtual/input/input369 [ 1059.702865] netlink: 17 bytes leftover after parsing attributes in process `syz-executor5'. 20:48:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd"], 0x38) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00/\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:52 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xf) 20:48:52 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000002c0)="310000001200e7ef107b0000e623000680a11d0de64f8652b2aa2a9c805bef90c0c9bf1d02d7be2f3233c951a642f3bfcb", 0x31, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000040)=""/14, 0xe, 0x0, 0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x301000, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x84, 0x1, 0x3}}, 0x14) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000000c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 20:48:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae7e, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1059.896830] input: syz0 as /devices/virtual/input/input370 [ 1059.905120] netlink: 17 bytes leftover after parsing attributes in process `syz-executor5'. 20:48:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffffffffffffffc, 0x0, @empty, 0x8}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) [ 1059.990203] input: syz0 as /devices/virtual/input/input371 20:48:53 executing program 5: syz_emit_ethernet(0x303b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3005ca, 0x6, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x8035, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x4000, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000140)=0x78) 20:48:53 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xe800) 20:48:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r3, &(0x7f0000000080)=0x142, 0x9168) bind$nfc_llcp(r3, &(0x7f0000000300)={0x27, 0x0, 0x0, 0x3, 0x100, 0xf, "f0531de896ca741285c8ee5cc50e54d08efae7382a5c6f7cf9799a51d1d7f848a7ade302a69f01df7b0382752f7076ac302ad5712752e7e66874ecfb8ea2a6", 0x8}, 0x60) ppoll(&(0x7f0000000200)=[{r3, 0x1088}, {r0, 0x2}, {r0, 0x2262}, {r0}, {r0, 0x4348}], 0x5, &(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f0000000280)={0x4}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r4, r0) clock_gettime(0x0, &(0x7f00000002c0)) timer_settime(r2, 0xfffffffffffffffd, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x6a, "a8180927f77bc5ca2e8acb3f9e107f05f46af099902781747d87eb963c8e73b4c9ed1aea9fb5b6a35e388d50396a3118be9fbda84c213ad8d1973bd159d39148ba72fd009dad2750ddd44832d2d9fa447db53d446feb80b5c91b3b675d94d4f6fe47af6b33566f924293"}, &(0x7f0000000140)=0x72) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={r6, 0x20}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000000440)=0x4) write$P9_RSETATTR(r5, &(0x7f0000000380)={0x7, 0x1b, 0x2}, 0x7) tkill(r1, 0x63) 20:48:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae19, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1060.251118] input: syz0 as /devices/virtual/input/input372 [ 1060.304104] input: syz0 as /devices/virtual/input/input373 20:48:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) r3 = dup3(r0, r2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) shutdown(r0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000000)={0x3b, @remote, 0x4e22, 0x3, 'nq\x00', 0x34, 0x6, 0x3e}, 0x2c) 20:48:53 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x50) 20:48:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000000000000000001600", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e"], 0x3d) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x4, 0x1}]}) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000016) 20:48:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae47, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1060.768377] input: syz0 as /devices/virtual/input/input374 [ 1060.811694] input: syz0 as /devices/virtual/input/input375 20:48:53 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$UHID_INPUT2(r0, &(0x7f0000001540)=ANY=[@ANYBLOB="0c0000005d001036c804921d991c9f11fcbc0358fd7e39689a88d13f8fc17ec53bf34a89e00488182f774d920200000000000000fa253cf7a3a1d0b00d32487b5b7655020ef5629aa6ba837c32c91100000000000000008abe57c74636ce6623cdcfd27a234a3d21effc822d985088bf969774b3ca734cedd53a2f60af450066af919ff1fd4dfdd225fcfe8b1f43c0d35d9738f86e7ac788bdd1ff1bb24d57038f6a5e6707206d9ada39d76e1d01727a6dce342fb175a0d3f1a771207c2a141f7771"], 0x63) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000001a80)) writev(r0, &(0x7f0000001640)=[{&(0x7f0000000100)="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", 0xf9d}], 0x1) 20:48:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000000000000000000400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:54 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xff37010000000000) 20:48:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae22, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1061.063300] input: syz0 as /devices/virtual/input/input376 [ 1061.089191] input: syz0 as /devices/virtual/input/input377 20:48:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x100000001}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e22, @remote}}, 0x8, 0x3}, 0x90) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) 20:48:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000000000000000001400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:54 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x400000000) [ 1061.255788] input: syz0 as /devices/virtual/input/input378 20:48:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r3, &(0x7f0000000080)=0x142, 0x9168) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) [ 1061.323540] input: syz0 as /devices/virtual/input/input379 20:48:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae02, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e"], 0x3d) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000000000400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:54 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x80000) 20:48:54 executing program 5: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xff37010000000000) 20:48:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000080)=0x142, 0x9168) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@empty, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000200)={@mcast1, 0x4, r4}) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) 20:48:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae74, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1061.707316] input: syz0 as /devices/virtual/input/input380 [ 1061.732866] input: syz0 as /devices/virtual/input/input381 20:48:54 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffcf0000) 20:48:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000000001600", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f00000004c0)) socketpair(0x1b, 0x5, 0x8, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x1204, 0x28, 0xc32, 0x70bd2c, 0x25dfdbfe, {0x14}, [@generic="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", @generic="4e2f53ba23d6994f9c04f64f7c57de74d364cef413b635bdf11b37898b71e786e9002bf3ce692a16adb2d66f493b283bdcef86503ab532792187ff55", @typed={0x8, 0x94, @fd=r0}, @generic="3407856f5c4620568074908acf22c3d281a916ae0527a109252cd44985def503c3aa", @generic="aa0dc65a4eea0a518ec385c27fae4db2b9df351d7cc78092730de54eac4df340697e320ad1f1ddddc92cc82a6804a97f2d26644f99e4c9801a41b865945b8f32bb7da249e3885f782aae40dd250b1e5665b30bf38f4ac6cab8a11f961b966941a3f9e39a885c46fb71b1d7914a7918d590cf3ca2060c60724b38af9b18313c4ece814f4194738d17a569de82968db71b667e97b751d1b964b40e2feff5db951414ab3cfab809ce22098f6e562e62cfab0fcd9475d255d927a7c1344cca26129328068a68f07ac773d9f9e7f3c900c9d7fb3c2960f8e69c4398c23af5577fb27156a419df2aebdd", @nested={0xa0, 0xe, [@typed={0x10, 0x7c, @str='[nodevppp1\x00'}, @generic="3b4616f2140b5a924c1744b57695fb755fa28a44fd6268cde6dd55de8f296285351fa6dd1f27dfd53afa027e54140494b44e662e16f0075a23801457f802aa89f0863fa8b6aab54d49f2a24fe683fc31d15f3920b78c92f13c3497f9c38609441c42c04e7a0d639be1d54c77362b9747538ad8b89eeb31bfe8644b8921db03c9c462b7d677ff96c550cbcb42"]}]}, 0x1204}, 0x1, 0x0, 0x0, 0x40040}, 0x40080) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r3, &(0x7f0000000080)=0x142, 0x9168) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="a8c4a81b20e0abea13ccda4ffca617cf1de357eac0a92c97ee8efac27c4019405b0fdde33ab62a196de6f46303f180fc78c3ea7403086f6edce820cea6a0e3162411b07dc86ee5fa6322f1d77f8419134a2a963c5e00d2460406dae56a551e84f44cfb1cc9791c428a65f2faccf9821d8b40100e8f31b1ff4f31102f9599f6ae7c25f45ab6e0661b5a8d") 20:48:55 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='pids.events\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x40, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) getxattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000340)=@known='security.capability\x00', &(0x7f0000000380)=""/88, 0x58) fcntl$getownex(r1, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x1f, 0xfffffffffffffcd1, 0x0, 0x0, 0x0, 0x0, 0x5b1, 0x1, 0x3, 0x7f, 0x7fffffff, 0x6, 0x6, 0xae1, 0x0, 0x5, 0x2c, 0x0, 0xee, 0x0, 0x0, 0xe, 0x0, 0x200, 0x0, 0x0, 0x401, 0x0, @perf_config_ext={0x9, 0x7}, 0x1, 0x0, 0xfffffffffffffffb, 0x0, 0x4, 0x0, 0x7f}, r3, 0x7, r1, 0x0) mkdir(&(0x7f00000009c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x14) mount(&(0x7f0000000a80), &(0x7f0000000a40)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000580)) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000180)=""/47, &(0x7f0000000440)=0x2f) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}}, 0xfffffffffffffe9c) umount2(&(0x7f00000004c0)='./file0\x00', 0x3) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000005c0)) [ 1061.956710] input: syz0 as /devices/virtual/input/input382 20:48:55 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xf4ffffff) [ 1062.094280] input: syz0 as /devices/virtual/input/input383 20:48:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000001100", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1062.286028] input: syz0 as /devices/virtual/input/input384 [ 1062.305999] input: syz0 as /devices/virtual/input/input385 20:48:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae3d, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:55 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x8004) 20:48:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00/\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e"], 0x3d) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:55 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x9, 0x80000) socketpair(0x11, 0x5, 0x7, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400a00) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x500000000034008}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="5500000018007f4812fe01b2a4a280930a06000000a84306910000000b00020035000c0006000000190015c002000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4faba7d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 1062.613876] input: syz0 as /devices/virtual/input/input386 [ 1062.660260] netlink: 'syz-executor5': attribute type 21 has an invalid length. [ 1062.676575] input: syz0 as /devices/virtual/input/input387 [ 1062.700064] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. [ 1062.709144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1062.716309] IPv6: NLM_F_CREATE should be set when creating new route [ 1062.722866] IPv6: NLM_F_CREATE should be set when creating new route 20:48:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000000000000000001500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:55 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffb7) 20:48:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae0a, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1062.903973] input: syz0 as /devices/virtual/input/input388 [ 1062.979369] input: syz0 as /devices/virtual/input/input389 20:48:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getflags(r0, 0x40b) r1 = socket(0x800000000000000, 0x5, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000400), &(0x7f00000003c0)=0xfffffffffffffedd) syz_emit_ethernet(0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)) 20:48:56 executing program 5: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) pwrite64(r0, &(0x7f0000000580), 0x7d, 0x21) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000380)={0xb}, 0xb) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x401, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_open_procfs(0x0, &(0x7f0000000600)='net\x00') r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) flistxattr(r0, &(0x7f00000007c0)=""/159, 0x9f) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000040), 0x10000000000443) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e22, 0x3, @mcast2, 0x6}}, 0x6, 0x3, 0x401, "601bef2b3e48a40c74e9e219f6e0c849e98baeef576994f2040c530e0be9929c1c5686bab21cfc0d1cd3bc33ca84d70e79ccb7d32f1be75ff49b033aa7d1ff48c6c99089a5f80d13a36925bb5c4e602c"}, 0xd8) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB]) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000700)={@remote, @broadcast, [], {@generic={0xa00}}}, 0x0) writev(r3, &(0x7f0000000cc0)=[{&(0x7f00000005c0)="9c6a8560ad25ce899551102b150deca5e43bc326", 0x14}], 0x1) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) 20:48:56 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xff0f010000000000) 20:48:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00\x00\x00\x00\x00?\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0x40049409, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1063.199296] input: syz0 as /devices/virtual/input/input390 20:48:56 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000040)={0x8, 0x100000000, 0xfffffffffffffc01, 0x1, 0xff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_newrule={0x48, 0x20, 0x80d, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FRA_DST={0x14, 0x1, @mcast1}, @FRA_SRC={0x14, 0x2, @dev}]}, 0x48}}, 0x0) [ 1063.279505] input: syz0 as /devices/virtual/input/input391 20:48:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de"], 0x3f) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:56 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xff67010000000000) 20:48:56 executing program 5: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) pwrite64(r0, &(0x7f0000000580), 0x7d, 0x21) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000380)={0xb}, 0xb) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x401, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_open_procfs(0x0, &(0x7f0000000600)='net\x00') r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) flistxattr(r0, &(0x7f00000007c0)=""/159, 0x9f) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000040), 0x10000000000443) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e22, 0x3, @mcast2, 0x6}}, 0x6, 0x3, 0x401, "601bef2b3e48a40c74e9e219f6e0c849e98baeef576994f2040c530e0be9929c1c5686bab21cfc0d1cd3bc33ca84d70e79ccb7d32f1be75ff49b033aa7d1ff48c6c99089a5f80d13a36925bb5c4e602c"}, 0xd8) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB]) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000700)={@remote, @broadcast, [], {@generic={0xa00}}}, 0x0) writev(r3, &(0x7f0000000cc0)=[{&(0x7f00000005c0)="9c6a8560ad25ce899551102b150deca5e43bc326", 0x14}], 0x1) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) 20:48:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000001400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:56 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x6, 0x21, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e23, 0x80000000, @local, 0x9}}, [0xfffffffffffffc01, 0x7fffffff, 0xc975, 0x2, 0x8, 0x3f, 0x8, 0x1, 0x8, 0x24000, 0x7, 0x9, 0x101, 0xc9, 0x1]}, &(0x7f00000001c0)=0x100) [ 1063.565124] input: syz0 as /devices/virtual/input/input392 20:48:56 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip6_tables_matches\x00') connect$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, {0x6, 0x100, 0x3, 0x1, 0x0, 0xdab8}, 0x8}, 0xa) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x4c4bdf5c, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x7, 0x101200) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x7, 0x2, [0x80, 0x0]}, &(0x7f0000000280)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000002c0)={r3, 0xb74}, 0x8) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000180)) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x2) [ 1063.614191] input: syz0 as /devices/virtual/input/input393 20:48:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:56 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x8000000000000) 20:48:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00\x00/\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:56 executing program 4: madvise(&(0x7f0000a75000/0x2000)=nil, 0x2000, 0xc) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x28000) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000000c0)={0x10003, 0x0, &(0x7f0000ffb000/0x3000)=nil}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0xd1, "e1c74ba45551084dd8858f505dd122641f36f62b616ae8bb6a73fbeb66d7323ca29b1b4cb21ca6735d2b3c64fa3601a55e3a4e48c0b074e87cf2bb5b0e35e8717575563334b1125872543ba4b1576c13629dfc6d20fe89781f990a65212ed75f24cd4f234fc15c2c50c79af4d4a0117433cd622f24319a5273bc11272e40b04a4f27ee2b037dcf74fb26599b1f56ffe54e30950d6feaef2f4969c8ecb2c2bc5b1e19889ebe5b0e61b259e5bcebe5c4545cab1abfec139721edc443fda1eac715a35ba44168ac16540644e71ee599965386"}, &(0x7f00000002c0)=0xd9) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={r2, 0x100000001, 0x10, 0x8}, &(0x7f0000000340)=0x10) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffff9c, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0x3b, &(0x7f0000a6b000/0x1000)=nil, 0x1) [ 1063.921831] input: syz0 as /devices/virtual/input/input394 [ 1064.001339] input: syz0 as /devices/virtual/input/input395 20:48:57 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xff770100) 20:48:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000001600", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1064.179275] input: syz0 as /devices/virtual/input/input396 [ 1064.208409] input: syz0 as /devices/virtual/input/input397 20:48:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de"], 0x3f) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:48:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:57 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xc00000) 20:48:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000000001f00", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:57 executing program 5: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000240)={0xffffc00000000000, 0x100000000, 0x8, 0x9, 0x4, 0x101}) setsockopt$inet6_tcp_buf(r0, 0x6, 0x3b, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000600)='syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x0, 0x0, 0x0, &(0x7f0000f6bffb)='GPL\x00', 0xffffffffffffffff, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) sync() r2 = syz_open_dev$sndpcmp(&(0x7f0000000680)='/dev/snd/pcmC#D#p\x00', 0x4, 0x20000) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000780)={0x7, [0x1, 0x4, 0x0, 0x8, 0x0, 0x401, 0x6]}, 0x12) mknod(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000010"], 0x1) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f00000002c0)=0x0) r5 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x200, 0x200000) io_cancel(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0xd3, r3, &(0x7f0000000580)="f0170e5465bf9bcab16eb6597a4ae39c99dd08bf99e7d6453ec5e7132bb07122ab209e5f98f4b27537965823abe91417553cca8cb7831625359c0ca5a6d4b7fac92e791180f1c8cd4b1a189d3b25", 0x4e, 0x3, 0x0, 0x3, r5}, 0x0) ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f00000007c0)=0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdr={0x18, 0x15, 0x101}, 0x18}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000004c0), &(0x7f0000000540)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/mixer\x00', 0x0, 0x0) lstat(&(0x7f00000008c0)='./file0/file0\x00', &(0x7f0000000d80)) [ 1064.452426] input: syz0 as /devices/virtual/input/input398 [ 1064.502693] input: syz0 as /devices/virtual/input/input399 20:48:57 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xe00) 20:48:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a3000000000001000", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de"], 0x3f) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1064.748358] input: syz0 as /devices/virtual/input/input400 [ 1064.804108] input: syz0 as /devices/virtual/input/input401 20:48:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae4a, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:59 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x54800) 20:48:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000000300", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:48:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000040)=[{0x4, 0xffffffff, 0x1000}], 0x1) semop(r0, &(0x7f0000000080)=[{0x7, 0x7, 0x800}, {0x0, 0x101, 0x800}], 0x2) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) semop(r0, &(0x7f0000000300), 0x0) semop(r0, &(0x7f0000000140)=[{0x1}, {0x2, 0x0, 0x1800}, {0x7, 0x2, 0x1800}, {0x3, 0x0, 0x1800}, {0x3, 0x6, 0x1800}, {0x7, 0x3c0, 0x1800}, {0x3, 0xffffffffffffff06}, {0x3, 0x4, 0x800}, {0x0, 0x7ff, 0x1000}], 0x9) semop(r0, &(0x7f0000000000)=[{0x4, 0x1, 0x1800}], 0x1) semop(r0, &(0x7f0000000200)=[{0x4, 0x2, 0x800}, {0x0, 0xfa, 0x1000}, {0x2, 0x3, 0x1800}, {0x0, 0x1, 0x1800}, {0x1, 0x7}, {0x0, 0x81, 0x1800}, {0x3, 0x5}, {0x4, 0x6}, {0x0, 0x1f, 0x800}], 0x9) getuid() r1 = open(&(0x7f0000000180)='./file0\x00', 0x388, 0x2) ioctl$TIOCMBIC(r1, 0x8004746b, &(0x7f00000001c0)=0x200) getegid() 20:48:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae54, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:48:59 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) sendfile(r0, r0, 0x0, 0x2000005) 20:48:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d"], 0x40) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1066.712555] input: syz0 as /devices/virtual/input/input402 20:48:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) close(r0) socket(0x40000000015, 0x805, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x700000000000}]) 20:48:59 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x5b800) [ 1066.804872] input: syz0 as /devices/virtual/input/input403 20:49:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000300", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:49:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae6c, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:49:00 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x600000000000000) 20:49:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040), 0x22a) [ 1067.084401] input: syz0 as /devices/virtual/input/input404 20:49:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d"], 0x40) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:49:00 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x1, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) setpgid(r3, r4) getpid() r5 = semget$private(0x0, 0x0, 0x0) semctl$SEM_INFO(r5, 0x0, 0x13, 0x0) [ 1067.196384] input: syz0 as /devices/virtual/input/input405 [ 1067.334149] mmap: syz-executor5 (7412) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 20:49:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="000000000000000000000000000000000010000000000000ed793afe0000000002008201260001000000640000000001270005000000000000006400000000030d0085043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000002c0)) getresgid(&(0x7f00000000c0), 0x0, &(0x7f0000000180)) getgroups(0x0, 0x0) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) listen(0xffffffffffffffff, 0x4) r0 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x0, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) vmsplice(r0, 0x0, 0x0, 0xe) 20:49:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000001200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:49:00 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x117ff) 20:49:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae1e, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1067.606624] input: syz0 as /devices/virtual/input/input406 [ 1067.687016] input: syz0 as /devices/virtual/input/input407 20:49:00 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x1, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) setpgid(r3, r4) getpid() r5 = semget$private(0x0, 0x0, 0x0) semctl$SEM_INFO(r5, 0x0, 0x13, 0x0) 20:49:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000001400", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1067.859423] loop4: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p21 [ 1067.859755] loop4: partition table partially beyond EOD, truncated 20:49:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae10, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:49:01 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x2800) [ 1068.041348] input: syz0 as /devices/virtual/input/input408 [ 1068.078481] loop4: p1 start 1 is beyond EOD, truncated 20:49:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d"], 0x40) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1068.100668] loop4: p2 size 2 extends beyond EOD, truncated [ 1068.139666] input: syz0 as /devices/virtual/input/input409 20:49:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae14, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:49:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00\x00\x00?\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1068.281468] loop4: p3 start 201 is beyond EOD, truncated [ 1068.288738] loop4: p4 start 301 is beyond EOD, truncated [ 1068.295276] loop4: p5 start 1 is beyond EOD, truncated [ 1068.300809] loop4: p6 start 1 is beyond EOD, truncated [ 1068.309046] loop4: p7 start 1 is beyond EOD, truncated [ 1068.315015] loop4: p8 start 1 is beyond EOD, truncated [ 1068.322586] loop4: p9 start 1 is beyond EOD, truncated 20:49:01 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x137ff) [ 1068.331834] loop4: p10 start 1 is beyond EOD, truncated [ 1068.338578] loop4: p11 start 1 is beyond EOD, truncated [ 1068.345404] loop4: p12 start 1 is beyond EOD, truncated [ 1068.351533] loop4: p13 start 1 is beyond EOD, truncated [ 1068.358646] loop4: p14 start 1 is beyond EOD, truncated [ 1068.364994] input: syz0 as /devices/virtual/input/input410 [ 1068.380336] loop4: p15 start 1 is beyond EOD, truncated [ 1068.395728] input: syz0 as /devices/virtual/input/input411 [ 1068.402718] loop4: p16 start 1 is beyond EOD, truncated [ 1068.419758] loop4: p17 start 1 is beyond EOD, truncated [ 1068.508788] loop4: p18 start 1 is beyond EOD, truncated [ 1068.548409] loop4: p19 start 1 is beyond EOD, truncated [ 1068.578028] loop4: p20 start 1 is beyond EOD, truncated [ 1068.583574] loop4: p21 start 1 is beyond EOD, [ 1068.620390] truncated [ 1068.634428] loop4: p22 start 1 is beyond EOD, truncated [ 1068.639817] loop4: p23 start 1 is beyond EOD, truncated [ 1068.665940] loop4: p24 start 1 is beyond EOD, truncated [ 1068.671337] loop4: p25 start 1 is beyond EOD, truncated [ 1068.677035] loop4: p26 start 1 is beyond EOD, truncated [ 1068.682629] loop4: p27 start 1 is beyond EOD, truncated [ 1068.688088] loop4: p28 start 1 is beyond EOD, truncated [ 1068.693466] loop4: p29 start 1 is beyond EOD, truncated [ 1068.698934] loop4: p30 start 1 is beyond EOD, truncated [ 1068.704351] loop4: p31 start 1 is beyond EOD, truncated [ 1068.704365] loop4: p32 start 1 is beyond EOD, truncated [ 1068.704377] loop4: p33 start 1 is beyond EOD, truncated [ 1068.704388] loop4: p34 start 1 is beyond EOD, truncated [ 1068.704400] loop4: p35 start 1 is beyond EOD, truncated [ 1068.704411] loop4: p36 start 1 is beyond EOD, truncated [ 1068.715404] loop4: p37 start 1 is beyond EOD, truncated [ 1068.715417] loop4: p38 start 1 is beyond EOD, truncated [ 1068.715427] loop4: p39 start 1 is beyond EOD, truncated [ 1068.715438] loop4: p40 start 1 is beyond EOD, truncated [ 1068.715449] loop4: p41 start 1 is beyond EOD, truncated [ 1068.715458] loop4: p42 start 1 is beyond EOD, truncated [ 1068.770141] loop4: p43 start 1 is beyond EOD, truncated [ 1068.776550] loop4: p44 start 1 is beyond EOD, truncated [ 1068.781948] loop4: p45 start 1 is beyond EOD, truncated [ 1068.798152] loop4: p46 start 1 is beyond EOD, truncated [ 1068.803539] loop4: p47 start 1 is beyond EOD, truncated [ 1068.809051] loop4: p48 start 1 is beyond EOD, truncated [ 1068.814530] loop4: p49 start 1 is beyond EOD, truncated [ 1068.819900] loop4: p50 start 1 is beyond EOD, truncated [ 1068.825362] loop4: p51 start 1 is beyond EOD, truncated [ 1068.830731] loop4: p52 start 1 is beyond EOD, truncated [ 1068.836166] loop4: p53 start 1 is beyond EOD, truncated [ 1068.841554] loop4: p54 start 1 is beyond EOD, truncated [ 1068.847003] loop4: p55 start 1 is beyond EOD, truncated [ 1068.852425] loop4: p56 start 1 is beyond EOD, truncated [ 1068.857830] loop4: p57 start 1 is beyond EOD, truncated [ 1068.863232] loop4: p58 start 1 is beyond EOD, truncated [ 1068.868644] loop4: p59 start 1 is beyond EOD, truncated [ 1068.874057] loop4: p60 start 1 is beyond EOD, truncated [ 1068.879475] loop4: p61 start 1 is beyond EOD, truncated [ 1068.884939] loop4: p62 start 1 is beyond EOD, truncated [ 1068.890318] loop4: p63 start 1 is beyond EOD, truncated [ 1068.896579] loop4: p64 start 1 is beyond EOD, truncated [ 1068.901957] loop4: p65 start 1 is beyond EOD, truncated [ 1068.907393] loop4: p66 start 1 is beyond EOD, truncated [ 1068.912780] loop4: p67 start 1 is beyond EOD, truncated [ 1068.918194] loop4: p68 start 1 is beyond EOD, truncated [ 1068.923585] loop4: p69 start 1 is beyond EOD, truncated [ 1068.929013] loop4: p70 start 1 is beyond EOD, truncated [ 1068.934409] loop4: p71 start 1 is beyond EOD, truncated [ 1068.939774] loop4: p72 start 1 is beyond EOD, truncated [ 1068.945236] loop4: p73 start 1 is beyond EOD, truncated [ 1068.950690] loop4: p74 start 1 is beyond EOD, truncated [ 1068.956142] loop4: p75 start 1 is beyond EOD, truncated [ 1068.961520] loop4: p76 start 1 is beyond EOD, truncated [ 1068.966938] loop4: p77 start 1 is beyond EOD, truncated [ 1068.972311] loop4: p78 start 1 is beyond EOD, truncated [ 1068.977729] loop4: p79 start 1 is beyond EOD, truncated [ 1068.983122] loop4: p80 start 1 is beyond EOD, truncated [ 1068.988523] loop4: p81 start 1 is beyond EOD, truncated [ 1068.994013] loop4: p82 start 1 is beyond EOD, truncated [ 1068.999378] loop4: p83 start 1 is beyond EOD, truncated [ 1069.004814] loop4: p84 start 1 is beyond EOD, truncated [ 1069.010192] loop4: p85 start 1 is beyond EOD, truncated [ 1069.015622] loop4: p86 start 1 is beyond EOD, truncated [ 1069.020996] loop4: p87 start 1 is beyond EOD, truncated [ 1069.027225] loop4: p88 start 1 is beyond EOD, truncated [ 1069.032586] loop4: p89 start 1 is beyond EOD, truncated [ 1069.038030] loop4: p90 start 1 is beyond EOD, truncated [ 1069.043398] loop4: p91 start 1 is beyond EOD, truncated [ 1069.048823] loop4: p92 start 1 is beyond EOD, truncated [ 1069.054242] loop4: p93 start 1 is beyond EOD, truncated [ 1069.059611] loop4: p94 start 1 is beyond EOD, truncated [ 1069.065093] loop4: p95 start 1 is beyond EOD, truncated [ 1069.070471] loop4: p96 start 1 is beyond EOD, truncated [ 1069.075891] loop4: p97 start 1 is beyond EOD, truncated [ 1069.081298] loop4: p98 start 1 is beyond EOD, truncated [ 1069.086740] loop4: p99 start 1 is beyond EOD, truncated [ 1069.092120] loop4: p100 start 1 is beyond EOD, truncated [ 1069.097652] loop4: p101 start 1 is beyond EOD, truncated [ 1069.103217] loop4: p102 start 1 is beyond EOD, truncated [ 1069.108752] loop4: p103 start 1 is beyond EOD, truncated [ 1069.114278] loop4: p104 start 1 is beyond EOD, truncated [ 1069.119776] loop4: p105 start 1 is beyond EOD, truncated [ 1069.125285] loop4: p106 start 1 is beyond EOD, truncated [ 1069.130779] loop4: p107 start 1 is beyond EOD, truncated [ 1069.136301] loop4: p108 start 1 is beyond EOD, truncated [ 1069.141790] loop4: p109 start 1 is beyond EOD, truncated [ 1069.147299] loop4: p110 start 1 is beyond EOD, truncated [ 1069.152787] loop4: p111 start 1 is beyond EOD, truncated [ 1069.159060] loop4: p112 start 1 is beyond EOD, truncated [ 1069.164695] loop4: p113 start 1 is beyond EOD, truncated [ 1069.170155] loop4: p114 start 1 is beyond EOD, truncated [ 1069.175662] loop4: p115 start 1 is beyond EOD, truncated [ 1069.181134] loop4: p116 start 1 is beyond EOD, truncated [ 1069.186632] loop4: p117 start 1 is beyond EOD, truncated [ 1069.192118] loop4: p118 start 1 is beyond EOD, truncated [ 1069.197642] loop4: p119 start 1 is beyond EOD, truncated [ 1069.203119] loop4: p120 start 1 is beyond EOD, truncated [ 1069.208643] loop4: p121 start 1 is beyond EOD, truncated [ 1069.214153] loop4: p122 start 1 is beyond EOD, truncated [ 1069.219632] loop4: p123 start 1 is beyond EOD, truncated [ 1069.225134] loop4: p124 start 1 is beyond EOD, truncated [ 1069.230614] loop4: p125 start 1 is beyond EOD, truncated [ 1069.236122] loop4: p126 start 1 is beyond EOD, truncated [ 1069.241615] loop4: p127 start 1 is beyond EOD, truncated [ 1069.247135] loop4: p128 start 1 is beyond EOD, truncated [ 1069.252630] loop4: p129 start 1 is beyond EOD, truncated [ 1069.258132] loop4: p130 start 1 is beyond EOD, truncated [ 1069.263599] loop4: p131 start 1 is beyond EOD, truncated [ 1069.269101] loop4: p132 start 1 is beyond EOD, truncated [ 1069.274636] loop4: p133 start 1 is beyond EOD, truncated [ 1069.280090] loop4: p134 start 1 is beyond EOD, truncated [ 1069.286458] loop4: p135 start 1 is beyond EOD, truncated [ 1069.291917] loop4: p136 start 1 is beyond EOD, truncated [ 1069.297439] loop4: p137 start 1 is beyond EOD, truncated [ 1069.303770] loop4: p138 start 1 is beyond EOD, truncated [ 1069.309356] loop4: p139 start 1 is beyond EOD, truncated [ 1069.315334] loop4: p140 start 1 is beyond EOD, truncated [ 1069.320905] loop4: p141 start 1 is beyond EOD, truncated [ 1069.327983] loop4: p142 start 1 is beyond EOD, truncated [ 1069.333867] loop4: p143 start 1 is beyond EOD, truncated [ 1069.339339] loop4: p144 start 1 is beyond EOD, truncated [ 1069.345069] loop4: p145 start 1 is beyond EOD, truncated [ 1069.350531] loop4: p146 start 1 is beyond EOD, truncated [ 1069.356118] loop4: p147 start 1 is beyond EOD, truncated [ 1069.361616] loop4: p148 start 1 is beyond EOD, truncated [ 1069.367128] loop4: p149 start 1 is beyond EOD, truncated [ 1069.372584] loop4: p150 start 1 is beyond EOD, truncated [ 1069.378091] loop4: p151 start 1 is beyond EOD, truncated [ 1069.383548] loop4: p152 start 1 is beyond EOD, truncated [ 1069.389054] loop4: p153 start 1 is beyond EOD, truncated [ 1069.394625] loop4: p154 start 1 is beyond EOD, truncated [ 1069.400074] loop4: p155 start 1 is beyond EOD, truncated [ 1069.405606] loop4: p156 start 1 is beyond EOD, truncated [ 1069.411077] loop4: p157 start 1 is beyond EOD, truncated [ 1069.416570] loop4: p158 start 1 is beyond EOD, truncated [ 1069.422038] loop4: p159 start 1 is beyond EOD, truncated [ 1069.427530] loop4: p160 start 1 is beyond EOD, truncated [ 1069.432998] loop4: p161 start 1 is beyond EOD, truncated [ 1069.438492] loop4: p162 start 1 is beyond EOD, truncated [ 1069.443977] loop4: p163 start 1 is beyond EOD, truncated [ 1069.449415] loop4: p164 start 1 is beyond EOD, truncated [ 1069.454932] loop4: p165 start 1 is beyond EOD, truncated [ 1069.460420] loop4: p166 start 1 is beyond EOD, truncated [ 1069.465907] loop4: p167 start 1 is beyond EOD, truncated [ 1069.471385] loop4: p168 start 1 is beyond EOD, truncated [ 1069.476918] loop4: p169 start 1 is beyond EOD, truncated [ 1069.482424] loop4: p170 start 1 is beyond EOD, truncated [ 1069.487916] loop4: p171 start 1 is beyond EOD, truncated [ 1069.493388] loop4: p172 start 1 is beyond EOD, truncated [ 1069.498893] loop4: p173 start 1 is beyond EOD, truncated [ 1069.504413] loop4: p174 start 1 is beyond EOD, truncated [ 1069.509855] loop4: p175 start 1 is beyond EOD, truncated [ 1069.515359] loop4: p176 start 1 is beyond EOD, truncated [ 1069.520869] loop4: p177 start 1 is beyond EOD, truncated [ 1069.526401] loop4: p178 start 1 is beyond EOD, truncated [ 1069.531881] loop4: p179 start 1 is beyond EOD, truncated [ 1069.537425] loop4: p180 start 1 is beyond EOD, truncated [ 1069.542888] loop4: p181 start 1 is beyond EOD, truncated [ 1069.548396] loop4: p182 start 1 is beyond EOD, truncated [ 1069.554030] loop4: p183 start 1 is beyond EOD, truncated [ 1069.559481] loop4: p184 start 1 is beyond EOD, truncated [ 1069.565003] loop4: p185 start 1 is beyond EOD, truncated [ 1069.570459] loop4: p186 start 1 is beyond EOD, truncated [ 1069.575964] loop4: p187 start 1 is beyond EOD, truncated [ 1069.581426] loop4: p188 start 1 is beyond EOD, truncated [ 1069.586921] loop4: p189 start 1 is beyond EOD, truncated [ 1069.592398] loop4: p190 start 1 is beyond EOD, truncated [ 1069.597900] loop4: p191 start 1 is beyond EOD, truncated [ 1069.603371] loop4: p192 start 1 is beyond EOD, truncated [ 1069.608879] loop4: p193 start 1 is beyond EOD, truncated [ 1069.614377] loop4: p194 start 1 is beyond EOD, truncated [ 1069.619815] loop4: p195 start 1 is beyond EOD, truncated [ 1069.625325] loop4: p196 start 1 is beyond EOD, truncated [ 1069.630793] loop4: p197 start 1 is beyond EOD, truncated [ 1069.636332] loop4: p198 start 1 is beyond EOD, truncated [ 1069.641801] loop4: p199 start 1 is beyond EOD, truncated [ 1069.647291] loop4: p200 start 1 is beyond EOD, truncated [ 1069.652768] loop4: p201 start 1 is beyond EOD, truncated [ 1069.658297] loop4: p202 start 1 is beyond EOD, truncated [ 1069.663791] loop4: p203 start 1 is beyond EOD, truncated [ 1069.669246] loop4: p204 start 1 is beyond EOD, truncated [ 1069.674775] loop4: p205 start 1 is beyond EOD, truncated [ 1069.680233] loop4: p206 start 1 is beyond EOD, truncated [ 1069.685759] loop4: p207 start 1 is beyond EOD, truncated [ 1069.691246] loop4: p208 start 1 is beyond EOD, truncated [ 1069.696771] loop4: p209 start 1 is beyond EOD, truncated [ 1069.702233] loop4: p210 start 1 is beyond EOD, truncated [ 1069.707772] loop4: p211 start 1 is beyond EOD, truncated [ 1069.713246] loop4: p212 start 1 is beyond EOD, truncated [ 1069.718849] loop4: p213 start 1 is beyond EOD, truncated [ 1069.724422] loop4: p214 start 1 is beyond EOD, truncated [ 1069.729891] loop4: p215 start 1 is beyond EOD, truncated [ 1069.735405] loop4: p216 start 1 is beyond EOD, truncated [ 1069.740884] loop4: p217 start 1 is beyond EOD, truncated [ 1069.746397] loop4: p218 start 1 is beyond EOD, truncated [ 1069.751929] loop4: p219 start 1 is beyond EOD, truncated [ 1069.757459] loop4: p220 start 1 is beyond EOD, truncated [ 1069.762930] loop4: p221 start 1 is beyond EOD, truncated [ 1069.768470] loop4: p222 start 1 is beyond EOD, truncated [ 1069.773961] loop4: p223 start 1 is beyond EOD, truncated [ 1069.779399] loop4: p224 start 1 is beyond EOD, truncated [ 1069.784888] loop4: p225 start 1 is beyond EOD, truncated [ 1069.790341] loop4: p226 start 1 is beyond EOD, truncated [ 1069.795833] loop4: p227 start 1 is beyond EOD, truncated [ 1069.801292] loop4: p228 start 1 is beyond EOD, truncated [ 1069.806798] loop4: p229 start 1 is beyond EOD, truncated [ 1069.812259] loop4: p230 start 1 is beyond EOD, truncated [ 1069.817750] loop4: p231 start 1 is beyond EOD, truncated [ 1069.823221] loop4: p232 start 1 is beyond EOD, truncated [ 1069.828730] loop4: p233 start 1 is beyond EOD, truncated [ 1069.834248] loop4: p234 start 1 is beyond EOD, truncated [ 1069.839698] loop4: p235 start 1 is beyond EOD, truncated [ 1069.845201] loop4: p236 start 1 is beyond EOD, truncated [ 1069.850672] loop4: p237 start 1 is beyond EOD, truncated [ 1069.856169] loop4: p238 start 1 is beyond EOD, truncated [ 1069.861647] loop4: p239 start 1 is beyond EOD, truncated [ 1069.867151] loop4: p240 start 1 is beyond EOD, truncated [ 1069.872631] loop4: p241 start 1 is beyond EOD, truncated [ 1069.878141] loop4: p242 start 1 is beyond EOD, truncated [ 1069.883678] loop4: p243 start 1 is beyond EOD, truncated [ 1069.889129] loop4: p244 start 1 is beyond EOD, truncated [ 1069.894630] loop4: p245 start 1 is beyond EOD, truncated [ 1069.900099] loop4: p246 start 1 is beyond EOD, truncated [ 1069.905591] loop4: p247 start 1 is beyond EOD, truncated [ 1069.911057] loop4: p248 start 1 is beyond EOD, truncated [ 1069.916547] loop4: p249 start 1 is beyond EOD, truncated [ 1069.922007] loop4: p250 start 1 is beyond EOD, truncated [ 1069.927504] loop4: p251 start 1 is beyond EOD, truncated [ 1069.932974] loop4: p252 start 1 is beyond EOD, truncated [ 1069.938488] loop4: p253 start 1 is beyond EOD, truncated [ 1069.943987] loop4: p254 start 1 is beyond EOD, truncated [ 1069.949424] loop4: p255 start 1 is beyond EOD, truncated 20:49:03 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x1f000000) 20:49:03 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x180500) 20:49:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000001200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:49:03 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x1, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) setpgid(r3, r4) getpid() r5 = semget$private(0x0, 0x0, 0x0) semctl$SEM_INFO(r5, 0x0, 0x13, 0x0) 20:49:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae71, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:49:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d01"], 0x41) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r6 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r7, 0x1) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1070.069586] input: syz0 as /devices/virtual/input/input412 [ 1070.105514] __loop_clr_fd: partition scan of loop4 failed (rc=-22) 20:49:03 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x1, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) setpgid(r3, r4) getpid() r5 = semget$private(0x0, 0x0, 0x0) semctl$SEM_INFO(r5, 0x0, 0x13, 0x0) [ 1070.125441] input: syz0 as /devices/virtual/input/input413 [ 1070.161197] print_req_error: I/O error, dev loop4, sector 0 20:49:03 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x40050000000000) [ 1070.237435] print_req_error: I/O error, dev loop4, sector 0 [ 1070.243529] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 1070.253237] print_req_error: I/O error, dev loop4, sector 0 [ 1070.259091] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 1070.286912] print_req_error: I/O error, dev loop4, sector 0 [ 1070.292712] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 1070.300909] print_req_error: I/O error, dev loop4, sector 0 [ 1070.306775] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 1070.314628] print_req_error: I/O error, dev loop4, sector 0 [ 1070.320364] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 1070.328250] print_req_error: I/O error, dev loop4, sector 0 [ 1070.334239] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 1070.348986] print_req_error: I/O error, dev loop4, sector 0 [ 1070.354934] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 1070.363767] print_req_error: I/O error, dev loop4, sector 0 [ 1070.369575] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 1070.377384] print_req_error: I/O error, dev loop4, sector 0 20:49:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00\x00\x00/\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1070.383212] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 1070.391959] Buffer I/O error on dev loop4p2, logical block 0, async page read 20:49:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae59, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1070.458415] input: syz0 as /devices/virtual/input/input414 [ 1070.514699] input: syz0 as /devices/virtual/input/input415 20:49:03 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x900000000) 20:49:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000000500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1070.819175] input: syz0 as /devices/virtual/input/input416 20:49:03 executing program 4: 20:49:03 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x1, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) setpgid(r3, r4) getpid() semget$private(0x0, 0x0, 0x0) 20:49:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d01"], 0x41) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r6 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r7, 0x1) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) [ 1070.921737] input: syz0 as /devices/virtual/input/input417 20:49:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae63, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:49:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xff07010000000000) 20:49:04 executing program 4: 20:49:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000000001200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1071.195354] input: syz0 as /devices/virtual/input/input418 20:49:04 executing program 4: 20:49:04 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x1, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) setpgid(r3, r4) getpid() [ 1071.346583] input: syz0 as /devices/virtual/input/input419 20:49:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x48) 20:49:04 executing program 4: 20:49:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a30000000001500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:49:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae24, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:49:04 executing program 4: [ 1071.614268] input: syz0 as /devices/virtual/input/input420 [ 1071.709623] input: syz0 as /devices/virtual/input/input421 20:49:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d01"], 0x41) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r6 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r7, 0x1) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:49:04 executing program 4: 20:49:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xc000) 20:49:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000001500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:49:04 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x1, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) setpgid(r3, r4) getpid() 20:49:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae3c, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 20:49:05 executing program 4: [ 1072.005670] input: syz0 as /devices/virtual/input/input422 20:49:05 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x3000) [ 1072.146277] input: syz0 as /devices/virtual/input/input423 20:49:05 executing program 4: 20:49:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00\x00\x00\x00\x00\x00/\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:49:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae50, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1072.346692] input: syz0 as /devices/virtual/input/input424 20:49:05 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x157ff) [ 1072.406443] input: syz0 as /devices/virtual/input/input425 20:49:05 executing program 4: 20:49:05 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x1, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) setpgid(r3, r4) 20:49:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0xffffffffffffff7f) io_submit(r3, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r5, 0x81f4}, 0x4a9) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000a00), 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000520100000000a746971977000000000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ad1381c3fdd0dd1c2847e38de1d01"], 0x41) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f00000004c0)=0x10) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x4, @loopback, 0x3f}}}, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) tkill(r8, 0x1) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0xf003000000000000, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0200ff0700000000001793972b0bf1577858672dbe8bb7ff58ccfecf139008c5d4c3fe1dd9836b78570645146f6d2f5e9493d525af0247e46176a034257c7d55cfd98a4913470c949948cf4f0041788574e942c1c66adce6a5b74f1a1d7ddefcacb9195b94a306ef52f2b0bd0e0873918aec1f830adc96277621bfa1e1147ced191a0edbd0c9425093985f8ed2ae89062af9e0a7a108cdcec8700000000000000000000000"], 0x28b}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f0000000800)=0xc) 20:49:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000000000100", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:49:05 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x60000000000000) 20:49:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae6a, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1072.787999] input: syz0 as /devices/virtual/input/input426 20:49:05 executing program 4: [ 1072.893918] input: syz0 as /devices/virtual/input/input427 20:49:05 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffbf000000000000) 20:49:06 executing program 4: 20:49:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000000000200", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) 20:49:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x0, &(0x7f0000000800)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae06, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) [ 1073.090772] input: syz0 as /devices/virtual/input/input428 [ 1073.109771] input: syz0 as /devices/virtual/input/input429 20:49:06 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xc0) 20:49:06 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x1, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) 20:49:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000600)={"73797a300000000000000500", {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000]}, 0x45c) [ 1073.259896] ------------[ cut here ]------------ [ 1073.264691] DEBUG_LOCKS_WARN_ON(depth <= 0) [ 1073.264820] WARNING: CPU: 0 PID: 7663 at kernel/locking/lockdep.c:3595 lock_release+0x740/0xa10 [ 1073.277977] Kernel panic - not syncing: panic_on_warn set ... [ 1073.283327] kobject: 'kvm' (000000004253869f): kobject_uevent_env [ 1073.283870] CPU: 0 PID: 7663 Comm: syz-executor5 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1073.283881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1073.283885] Call Trace: [ 1073.283907] dump_stack+0x244/0x39d [ 1073.283931] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1073.319403] panic+0x2ad/0x55c [ 1073.322600] ? add_taint.cold.5+0x16/0x16 [ 1073.326747] ? __warn.cold.8+0x5/0x45 [ 1073.330547] ? lock_release+0x740/0xa10 [ 1073.334523] __warn.cold.8+0x20/0x45 [ 1073.338237] ? lock_release+0x740/0xa10 [ 1073.342217] report_bug+0x254/0x2d0 [ 1073.345849] do_error_trap+0x11b/0x200 [ 1073.349738] do_invalid_op+0x36/0x40 [ 1073.353451] ? lock_release+0x740/0xa10 [ 1073.357431] invalid_op+0x14/0x20 [ 1073.360887] RIP: 0010:lock_release+0x740/0xa10 [ 1073.365471] Code: 03 38 d0 7c 08 84 d2 0f 85 da 02 00 00 8b 35 a7 95 b3 08 85 f6 75 15 48 c7 c6 20 66 2b 88 48 c7 c7 c0 33 2b 88 e8 10 36 e7 ff <0f> 0b 48 8b 95 e8 fe ff ff 4c 89 f7 48 8b b5 f0 fe ff ff e8 e8 58 [ 1073.384365] RSP: 0018:ffff880183b6f868 EFLAGS: 00010086 [ 1073.389721] RAX: 0000000000000000 RBX: 1ffff1003076df12 RCX: ffffc9000fe59000 [ 1073.396988] RDX: 00000000000074e2 RSI: ffffffff8165ba15 RDI: 0000000000000006 [ 1073.404254] RBP: ffff880183b6f998 R08: ffff8801847f0640 R09: fffffbfff12b2254 [ 1073.411519] R10: fffffbfff12b2254 R11: ffffffff895912a3 R12: ffffffff8b0e27a0 [ 1073.418780] R13: ffff880183b6f970 R14: ffff8801847f0640 R15: ffff880183b6f8b0 [ 1073.426059] ? vprintk_func+0x85/0x181 [ 1073.429949] ? lock_release+0x740/0xa10 [ 1073.433992] ? loop_control_ioctl+0xf5/0x4e0 [ 1073.438403] ? lock_downgrade+0x900/0x900 [ 1073.442545] ? __radix_tree_lookup+0x3a7/0x500 [ 1073.447122] ? radix_tree_insert+0x870/0x870 [ 1073.451528] ? find_held_lock+0x36/0x1c0 [ 1073.455593] __mutex_unlock_slowpath+0x102/0x8c0 [ 1073.460350] ? __fget+0x4aa/0x740 [ 1073.463799] ? wait_for_completion+0x8a0/0x8a0 [ 1073.468382] ? check_preemption_disabled+0x48/0x280 [ 1073.473394] ? radix_tree_lookup+0x21/0x30 [ 1073.477626] ? idr_find+0x44/0x50 [ 1073.481079] ? loop_lookup+0x105/0x230 [ 1073.484967] ? loop_exit_cb+0x20/0x20 [ 1073.488768] mutex_unlock+0xd/0x10 [ 1073.492307] loop_control_ioctl+0xf5/0x4e0 [ 1073.496543] ? loop_add+0xa20/0xa20 [ 1073.500167] ? __might_fault+0x12b/0x1e0 [ 1073.504233] ? lock_downgrade+0x900/0x900 [ 1073.508379] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1073.513159] ? loop_add+0xa20/0xa20 [ 1073.516809] do_vfs_ioctl+0x1de/0x1790 [ 1073.520700] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1073.525460] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1073.530906] ? ioctl_preallocate+0x300/0x300 [ 1073.535314] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1073.540103] ? retint_kernel+0x2d/0x2d [ 1073.543990] ? ksys_ioctl+0x62/0xd0 [ 1073.547616] ksys_ioctl+0xa9/0xd0 [ 1073.551066] __x64_sys_ioctl+0x73/0xb0 [ 1073.554954] do_syscall_64+0x1b9/0x820 [ 1073.558841] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1073.564213] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1073.569142] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1073.574006] ? trace_hardirqs_on_caller+0x310/0x310 [ 1073.579203] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1073.584226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1073.589761] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1073.594777] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1073.599623] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1073.604810] RIP: 0033:0x457569 [ 1073.608001] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1073.626911] RSP: 002b:00007f51e8667c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1073.634618] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 1073.641878] RDX: 0000000000000004 RSI: 0000000000004c81 RDI: 0000000000000004 [ 1073.649143] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1073.656403] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f51e86686d4 [ 1073.663665] R13: 00000000004c06f1 R14: 00000000004d1028 R15: 00000000ffffffff [ 1073.671972] Kernel Offset: disabled [ 1073.675592] Rebooting in 86400 seconds..