p_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x0) 10:51:43 executing program 0: syz_emit_ethernet(0x8e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "7f67de", 0x7, 0x2c, 0x0, @private1, @private2, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@dev, @remote, @empty, @mcast1]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "3481af", 0x0, "37c66b"}}}}}}}, 0x0) 10:51:43 executing program 3: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast2}}) 10:51:43 executing program 5: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @loopback, @dev}}) 10:51:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x5865}, 0x0) 10:51:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c000000130001002bbd7000fbdbdf2500000000", @ANYRES32, @ANYBLOB="42000100020801000900220011d338e8d90000006000eb"], 0x8c}}, 0x0) 10:51:43 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000000)="9f98bc8f9bc8432f58f6b189a4e0", 0xe, 0x40, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x20000054) 10:51:43 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="180000004000000000002000010000001840000001000000000000000000000085100000fd"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xe0, &(0x7f0000000340)=""/224, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:43 executing program 2: r0 = socket(0x25, 0x5, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x240000c1) 10:51:43 executing program 1: r0 = socket(0x18, 0x0, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 10:51:43 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000050c0), 0x4000, 0x0) 10:51:43 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "7f67de", 0x18, 0x21, 0x0, @private1, @private2, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "3481af", 0x0, "37c66b"}}}}}}}, 0x0) 10:51:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 10:51:43 executing program 3: syz_emit_ethernet(0x11, &(0x7f0000000280)={@empty, @local, @void, {@x25}}, 0x0) 10:51:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000006e80)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000200)="7b0ec8af2a2d2d04", 0x8}, {&(0x7f0000001280)="b5e399e5b5", 0x5}, {&(0x7f00000012c0)="41a6796de0dfe17e5bce0898b8", 0xd}, {0x0}, {&(0x7f0000001440)="84c0a4edf9c9f64962da05edd80997a8d15cb628e7fab98f52bc90dc22a6", 0x1e}], 0x5}}], 0x1, 0x0) 10:51:43 executing program 1: bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x9000) 10:51:43 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) 10:51:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x10a6, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:51:43 executing program 5: syz_emit_ethernet(0xaa, &(0x7f0000001200)={@dev, @local, @val={@void}, {@ipv4={0x800, @gre={{0x15, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @local, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {@empty}, {}]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 10:51:43 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast, {[@noop]}}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 10:51:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x7}, 0x48) 10:51:43 executing program 1: socket(0x23, 0x0, 0x8) 10:51:43 executing program 4: syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @local, @void, {@llc={0x8100, {@llc={0x0, 0x0, "c2"}}}}}, 0x0) 10:51:43 executing program 0: syz_emit_ethernet(0xcf, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "7f67de", 0xb, 0x21, 0x0, @private1, @private2, {[@srh={0x0, 0xa, 0x4, 0x5, 0x0, 0x0, 0x0, [@dev, @remote, @empty, @mcast1, @remote]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "3481af", 0x0, "37c66b"}, "ac1126589ae22709c19844afb6053c8b2da17de52acee6d3eeb4faf03bedfcfd46783d5def222bd4aafe5cc9ae0d602a64"}}}}}}, 0x0) 10:51:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001e80)={0xac, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x7f, 0x80, [@fast_bss_trans={0x37, 0x52, {0x0, 0x0, "99b00bb915279e1d56579d9ccaf5ac6f", "0699ddb1d04fef667a6857260c74be348cce732c99e6f5e5ff87e7649db9c3e8", "fcbe6b1f09959b25badea23960747687224c15acd8d70b7390b9f60e2f935d81"}}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @device_b, 0x0, 0x0, @broadcast}}]}, @NL80211_ATTR_IE={0x4}]]}, 0xac}}, 0x0) 10:51:44 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x8, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:44 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) 10:51:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x1, 0xb, 0x3, 0x80d}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000080), 0x0}, 0x20) 10:51:44 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') 10:51:44 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe0a, 0x0, &(0x7f0000000540)="8d14fb003092bd81ed4e5b534c5747c8", 0x0, 0x1000}, 0x28) 10:51:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:44 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000021000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000056ce36b68bff324dc45b6f970f6ab926231e6c37d03057c90000866f55e3376e4a82071d7827af04f8426e5b0eb4642172797fc01200533324f871d94768e25851d3162c1bde856ed69b673e5b8d861ff207c0eb4b60a82fc3c0e2085d6add5893b223f703a954af0805f231eb8474953f640e3d490cdc0448ecf21b205768e34ab95b6ef820398c1ba4b81cee61bd084623ca56c82b205eca4d90628aeacbd4654eb4371861a98bb8fc0fb89f8abf8e94d4429449cd85af76d9929b318c989bebd2f992112024650892c2e25b38f9cac849a62720cd661d21ab5d7a8b9f974b4f5da4b6862c01b4cbe5f279020000009f366ec0aee3344d712d35edc17c209296c3db7ff279c9bc5ab356c3471399f860fef75f37888d0b0968f5a8fcdf57cc5c62f45fcaccb1a3401d604f415840873a0e1df38c8c7c9ce232542acf57c44faea190b98de36aa113dba42def9c5bc3c90823529860583d8fb2dd17279eaf00545f7f7c4fa93603f2ae2260bb56cb1a542ab27dfb25f54b6f73e2da29ef6b6f33e099cd94987238b5b09ab1b377fc08135572dd7e7ae09d603115f1cde757c9d2fd838a84251cbe5f8e9e62fee4d1554fa20d84df5e107d368c139b5c17e916a990422a72150235ea93abb04521db134aad75b7c41ec63ca90e22c26a6ef512cd5c598330e07b18183e20f145c031a129aed2186d030000000000000055b18a727bfc6616d0df05a684730e2f014e5400000000000000007d468676e6c0da27c75254f16c0680519c26f1a602b0df27df00e16af8ac465612353a1e4fc13dfb46c68acc6a000000000000000000000000000000000000dcec704f1e0f9343f76e783f980a20c15b9ad1eeebd6e9f5cb45422a075a7ec964d386fb9ba291492161cfa7edac599d6287f1873abda0c12a84f1345e7717e5ff08871f6a11d9d4829e6cc80716241c501b4298cb0a64299f0f74db2ad1ae0dc5f3cf47ecbbff4c8fbe3cde681e5422a4820e7c49568a9648414487e8dc65ae5d05c5bbf0272c2f698966a307fd74264998b08574cbbae2ad9acde1dc4cd040c212f87fb2b80f08e00aa568e8cfe998523355df720f231b728e157f70761c12957d9443241b20a33d3ac117adf89ed477e847d55b2e7c6806ecfa2749f1cc9cdfce7c401e927e878108956a94a3d56d0ca7ecc3e37834731d25b3bbff407a7c5751000000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe, 0x0, &(0x7f0000000800)="b95b2d3f6ef7a015675a40f08678", 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 10:51:44 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2000000}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'a'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "8cd5b4"}]}}, &(0x7f0000000b40)=""/155, 0x42, 0x9b, 0x1}, 0x20) 10:51:44 executing program 0: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'wg1\x00', @dev}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe, 0x0, &(0x7f0000000800)="b95b2d3f6ef7a015675a40f08678", 0x0, 0x3b, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 10:51:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x0, 0x0, 0xccab, 0x0, 0x1}, 0x48) 10:51:44 executing program 4: socketpair(0x28, 0x0, 0x8, &(0x7f0000000300)) 10:51:44 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x5002, 0x7, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4099}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r0, &(0x7f0000001300), &(0x7f0000000100)=""/142}, 0x20) 10:51:44 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) 10:51:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'sit0\x00', @local}) 10:51:44 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)='T', 0x1}], 0x1}, 0x0) 10:51:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x0}, 0x20) 10:51:44 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x48000000}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'a'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "8cd5b4"}]}}, &(0x7f0000000b40)=""/155, 0x42, 0x9b, 0x1}, 0x20) 10:51:44 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xe000000, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001d008105e00f80ecdb4cb9f207a07e4f0d000000880306fb0a0002004112da1b40d805000374c50083b8", 0x2e}], 0x1}, 0x0) 10:51:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0], 0x1}, 0x20) 10:51:44 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)}, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="546562cd052da710bd8454317a470512aab7c5770917eeb9090fc8fd3755ffe94662b9032d1e9de410807823d8cb2c1a051fa282b05846a49ef67f061830cdffcb77b1c83e399194a5c615969fbf22f90eaf57dbf457f08d481b414d63e05e7d22b2d8d09c9ca868aa1d5bcf262282f0ffd1c719b26d3819facfcebfda8f4ef9597f79cff823bff8515a3fb0113512e8", 0x90}], 0x1}, 0x0) 10:51:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="546562cd052da710bd8454317a470512aab7c5770917eeb9090fc8fd3755ffe94662b9032d1e9de410807823d8cb2c1a051fa282b05846a49ef67f061830cdffcb77b1c83e399194a5c615969fbf22f90eaf57dbf457f08d481b414d63e05e7d22b2d8d09c9ca868aa1d5bcf262282f0ffd1c719b26d3819facfcebfda8f4ef9597f79cff823bff8515a3fb0113512e827f6800f2ef647800eb729ab23a86f2a", 0xa0}], 0x1}, 0x0) 10:51:44 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x1, 0x0, &(0x7f0000000080)=[0x0], 0x1}, 0x20) 10:51:44 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) 10:51:44 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/199, 0xc7}], 0x1, &(0x7f00000003c0)=""/219, 0xdb}, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="546562cd052da710bd8454317a470512aab7c5770917eeb9090fc8fd3755ffe94662b9032d1e9de410807823d8cb2c1a051fa282b05846a49ef67f061830cdffcb77b1c83e399194a5c615969fbf22f90eaf57dbf457f08d481b414d63e05e7d22b2d8d09c9ca868aa1d5bcf262282f0ffd1c719b26d3819facfcebfda8f4ef9597f79cff823bff8515a3fb0113512e827f6800f2ef647800eb729ab23a86f2a2c85ee3dcbb57b64ec3a", 0xaa}, {&(0x7f00000010c0)="33389501a5536b2b78dbed4402a1b8ffc058ec6f9d38df194cfadb1cb3", 0x1d}], 0x2}, 0x0) 10:51:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 10:51:44 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) 10:51:44 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/219, 0xdb}, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)='T', 0x1}], 0x1}, 0x0) 10:51:44 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@typedef={0x0, 0x0, 0x0, 0x10}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'a'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "8cd5b4"}]}}, &(0x7f0000000b40)=""/155, 0x42, 0x9b, 0x1}, 0x20) 10:51:44 executing program 4: socketpair(0x28, 0x0, 0x0, &(0x7f0000000300)) 10:51:44 executing program 2: socketpair(0xa, 0x1, 0x8, &(0x7f0000000000)) 10:51:44 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x1000000}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'a'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "8cd5b4"}]}}, &(0x7f0000000b40)=""/155, 0x42, 0x9b, 0x1}, 0x20) 10:51:44 executing program 5: r0 = socket$inet6(0x18, 0x3, 0x0) shutdown(r0, 0x3) 10:51:44 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 10:51:44 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r0, 0x0, 0x0) 10:51:44 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/219, 0xdb}, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)='T', 0x1}], 0x1}, 0x0) 10:51:44 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4086, 0xff6}, 0x0) 10:51:44 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) 10:51:44 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r0, 0x0, 0x0) 10:51:44 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) 10:51:44 executing program 5: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) 10:51:44 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000007dc0)={0x0, 0x0, &(0x7f0000007cc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 10:51:45 executing program 2: fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x0) 10:51:45 executing program 0: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x5012, 0xffffffffffffffff, 0x0) 10:51:45 executing program 3: getpeername(0xffffffffffffff9c, 0x0, &(0x7f0000000080)) msync(&(0x7f0000e7f000/0x3000)=nil, 0x3000, 0x1) 10:51:45 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendto$unix(r1, 0x0, 0x0, 0x1, &(0x7f0000000800)=ANY=[], 0xa) 10:51:45 executing program 5: utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000007e40), 0x0) 10:51:45 executing program 0: recvmsg(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0) 10:51:45 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = getpid() fcntl$setown(r2, 0x6, r3) fcntl$setown(r2, 0x6, 0x0) 10:51:45 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f00000017c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 10:51:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001440)={&(0x7f0000000140)=ANY=[], 0x10, &(0x7f00000013c0)=[{&(0x7f0000000180)="3eff1cc5a1d42d40caa8003913ff14cd31c1de1b450e7478f02ef1faa53fd4e1bc8375f4ad14f4dd20e1563a2c432d62b96fbadf9938844979705e8a90edce155e39cb47ef16976d978c10d31566c819768cb2e32ba3d17dd924cf9f87533ada4bbeeb71e4e32ee980aa2a51fd010def8f54ca804ebe70d2ca6ca709a37a32f056f1a24446c2c3395b96e090294aa7c5ec", 0x91}, {0x0}], 0x2}, 0xe) 10:51:45 executing program 2: sendmsg(0xffffffffffffff9c, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000001b00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 10:51:45 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = getpid() fcntl$setown(r2, 0x6, r3) r4 = getpid() fcntl$setown(r2, 0x6, r4) 10:51:45 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in, 0xc) 10:51:45 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xa) 10:51:45 executing program 4: r0 = socket$inet6(0x18, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0x18, 0x3}, 0xc) 10:51:45 executing program 5: r0 = socket$inet6(0x18, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x18}, 0xc) 10:51:45 executing program 2: r0 = socket$inet6(0x18, 0x3, 0x0) getsockname$inet6(r0, 0x0, &(0x7f0000000040)) 10:51:45 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000380)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000640), 0x0, 0x4}, 0x0) 10:51:45 executing program 0: msgrcv(0x0, 0x0, 0x3e, 0x0, 0x0) 10:51:45 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000400)=""/4086, 0xff6}, 0x0) 10:51:45 executing program 4: socketpair(0x1, 0x2, 0x1, &(0x7f0000000280)) 10:51:45 executing program 2: getgid() dup(0xffffffffffffffff) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) 10:51:45 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) 10:51:45 executing program 5: r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg(r1, &(0x7f00000008c0)={&(0x7f0000000000)=@in6={0x18, 0x1}, 0xc, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x401) 10:51:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001440)={&(0x7f0000000140)=ANY=[], 0x10, &(0x7f00000013c0)=[{&(0x7f0000000180)="3eff1cc5a1d42d40caa8003913ff14cd31c1de1b450e7478f02ef1faa53fd4e1bc8375f4ad14f4dd20e1563a2c432d62b96fbadf9938844979705e8a90edce155e39cb47ef16976d978c10d31566c819768cb2e32ba3d17dd924cf9f87533ada4bbeeb71e4e32ee980aa2a51fd010def8f54ca804ebe70d2ca6ca709a37a32f056f1a24446c2c3395b96e090294aa7c5ec323f4cc9d094ce8e598a65f2556747e3d7392d763530e4c4e2e6f855e8f059a6dce3e61f3ffb9a298ac9a0423382089357bdfcf607957da7ac1783d08b401145d44a636ed7ac2c00bca64513eb56f29287d05e52f7ac87c73a84f3b47852cf0563501d", 0xf4}, {&(0x7f0000000280)="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", 0xf0d}, {0x0}], 0x3}, 0xe) 10:51:45 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=' ', 0x1}], 0x1, &(0x7f0000000640)=[@rights], 0x10}, 0x0) 10:51:45 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) 10:51:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001440)={0x0, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000180)="3eff1cc5a1d42d40caa8003913ff14cd31c1de1b450e7478f02ef1faa53fd4e1bc8375f4ad14f4dd20e1563a2c432d62b96fbadf9938844979705e8a90edce155e39cb47ef16976d978c10d31566c819768cb2e32ba3d17dd924cf9f87533ada4bbeeb71e4e32ee980aa2a51fd010def8f54ca804ebe70d2ca6ca709a37a32f056f1a24446c2c3395b96e090294aa7c5ec323f4cc9d094ce8e598a65f2556747e3d7392d763530e4c4e2e6f855e8f059a6dce3e61f3ffb9a298ac9a0423382089357bdfcf607957da7ac1783d08b401145d44a636ed7ac2c00bca64513eb56f29287d05e52f7ac87c73a84f3b47852cf0563501d", 0xf4}, {&(0x7f0000000280)="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", 0xf0d}, {0x0}], 0x3}, 0xe) 10:51:45 executing program 5: recvmsg(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 10:51:45 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 10:51:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001440)={0x0, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000180)="3eff1cc5a1d42d40caa8003913ff14cd31c1de1b450e7478f02ef1faa53fd4e1bc8375f4ad14f4dd20e1563a2c432d62b96fbadf9938844979705e8a90edce155e39cb47ef16976d978c10d31566c819768cb2e32ba3d17dd924cf9f87533ada4bbeeb71e4e32ee980aa2a51fd010def8f54ca804ebe70d2ca6ca709a37a32f056f1a24446c2c3395b96e090294aa7c5ec323f4cc9d094ce8e598a65f2556747e3d7392d763530e4c4e2e6f855e8f059a6dce3e61f3ffb9a298ac9a0423382089357bdfcf607957da7ac1783d08b401145d44a636ed7ac2c00bca64513eb56f29287d05e52f7ac87c73a84f3b47852cf0563501d", 0xf4}, {&(0x7f0000000280)="a0582101fdcd3ba0b197f84a1bbbb2fdbecfce0f09449fe570a9c9f4b7c913545411cde7ac2554e70bfe7b481976fbadccd40de9418495980b82a66275f87f219d5e7a61d56556178bc9f11f160ae1e5cfad7988face31662b050eaeafcc9d5c74bb287ab6c61d50a73407e307c3773b015bd75ba93e7e3272b1310a07879f1cb7109d165c8bc4e97b3af221dceefe730bf6a4b06aced61d4b96996e4a7d6d45d8af1ad6f200f5b3312839890974fedad4e5f94b76820d0c30a9474c8be40e9456fbe68963bc8fe19eb3f09543c98836713b46a0b4d6f479fbe1336262a866378bb45bc7f3fb33760094009b2daa4e5a29969e3827ca9fda642e417c53694bcf27bd90e8c646711a7c49be7a7d074a81df140978053dc7c66b4f910b7d7dd37d7c5de0dd4f39f41504fc16ffc715b1df413db55b19c1cf94c36b943c56ab550505778c7ba14328aaf499445fc7b44935cb0ed661f9feeca52e32d5d1b367ca97344a7a818d373226a42b22d44f84fadd271dbb618db5daea81681323281538f02c304cd100e81260eff52625b81c7b7d3d9966d743a0b926a3eaf5d1ba157247ec7c552e41589ceb7c8461e05d6014dbdd64bfedec59c90e29bddb1cb4ac457cb4f9b498d3c9bce757ee95b9316f12f7150125388665c97f71f37e71e3023a5a01dde350442e08e4cfec8378a8246ca0932295ebf03da3f86333d34d65fd3f1ce98321042b7d32e7bd3c686ef28899309309a4893dae37cbc1592ca499bc02e5ab6adea9bb38bfcf5ac30c8d0184135125287464addb79065bd846796e9fc1dde0fee3fb6e0518c1274b3cf28e4d57ddcc3ffb7f301a96f7af58ea6151d41cea8eed10d42f349f9e3d277df08d66658967035a84c52c1ca3cf6e1fda9d63d84feff5046887e29ce6e8fdb12c9924c304c4391a8d5696811ee395589c1e373e19dcb7fb3c3d9ab744f0940a0cdc9cfa41f566044ffd72bec8f18a3211adfbbd899705de76b409a9704331a0e2e02be747d78b545ed652fc2f9889f99d40d18cc907b21781c34b4f44b963145a5fe2754651a58e4d1e1a4c547b695acdf6166a444faef887ece5f0d5219cbcdcc163d81302e2ce9786388962910589f352001df02b7a920746cd90d67eb1ee706e22f37320f20b9380afb1bab18d256e3668bc9f0581f06760e1517a9a5b747424bcfaeb747f370bc60edf7cef68c7905bda1c7e9a5d28c2c5a13412416dd267699c55fbff97651512f6fb0aeece32fa6e61e3e1e648e1aabeba41219fe66de7ef4f42198ca5501d29567760527d3907d8ef2ac97b50b5bbd17f4076b827f52050686d0928b318f43b2a3fe677c566be73a7342f8c70e792872f9963f3135f8296a7d9e5a652676c2c8ff42ad85755c9f8181c1378235d5547e9b2eb25bfaeb1b9bc4ec9626e8a5b217d72f22faf35cf6fd22a61c3a6d4cfa6ba06c9d8dd4ab82e0af247a80f9ce5e0b5f41a92fcb9708907df8c0cb77ba1614320e15126beba6265f732f251b2196d0f4c02c9fd23d272a87df45103424fc1889481a63506ce93a2084fc19a6de0a504dab4ae6ea9d97163d9e36e95846289f8f59db957d6b918f50ab0873ee76671fd6df66c6e116c236b810165dd41204ed1c655cefb5c347f82b2090a5bac8f8537c09cfae65fdc86b02d23186fa0bf2342179eac8e6fc8552fccf70977d0e5d56777efcea28947f46c52fcf638884729dac97d0df4b6f424d9309b33e7f4adbea4d369d112edfde56ef6c9daaabaef4ec976dd288a84efedbb1de14d92b0b4ebc80895817d5bcce9f7d52b815eabc7f5d9c1628639bb126c6a131fc8c8f6d1426583f7530beef7b3eb94894d878550ee8a25384b33df9a9c714eb618611552f45d72b96a4bc3ff8bee2fffe50ad37665bc540666de5782b5e7eece9adf5160690edd0fea0103fce5fde657fdb92259c696d9fb516a4b6b3d4a76dbc63d2d0a9b125b86a3424b29ba36e6362a1a462d3401d3eca85bde7f8f16dfa2f37071c1d0008c77e3f369929c3b21b88afac30d70d7b25bf86e5a8399819ca1a24f7a66cd03bf0706731ecba272ae6754323996870a79b85ca10af2e3496852945c4e9a3e24e5b74b40ef255508ba17e41491b26800c5724f3ffadc4c2888826e2bc8e445c529c95a61925cde17859932024d81332c3ec0bd769dac355601fedf9a52e6f234bf3928edf72fb9a19aa08faf5a7d01dbc8760ab28e849f8dd03adbb5f3b1e0e3b5fe8fa1fcd7b3b984c6da76b65c3ba649987819fc7dbbdab8926d6f65f5f3d7ae83b69baec754df49b2756eaef71b70d7b6ec35ba3107d7458f66999e030fbbb06bf80bdbd4721dd7839241df8e4ebbf4acac61fcae8fb168d888dc34b33d80039de9cb2d51280c0b30a535c0334a648133ade9c2fd35a48ae253f7db69114a8c60c9a248cce772640a3727b2035fc3a0785fdd2d37c1ad2235a63c99aa93f401e6266e0e2d5e654bce30d57d9c6c047ab3b2a8746ea70811c57391a417ea289dbf58af1b808d7a4ca0f20feaeb275d64d657c929e78c", 0x70d}], 0x2}, 0x0) 10:51:45 executing program 0: socketpair(0x1, 0x1, 0x1, &(0x7f0000000280)) 10:51:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x408) 10:51:45 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) shutdown(r0, 0x2) 10:51:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001440)={&(0x7f0000000140)=ANY=[], 0x10, &(0x7f00000013c0)=[{&(0x7f0000000180)="3eff1cc5a1d42d40caa8003913ff14cd31c1de1b450e7478f02ef1faa53fd4e1bc8375f4ad14f4dd20e1563a2c432d62b96fbadf9938844979705e8a90edce155e39cb47ef16976d978c10d31566c819768cb2e32ba3d17dd924cf9f87533ada4bbeeb71e4e32ee980aa2a51fd010def8f54ca804ebe70d2ca6ca709a37a32f056f1a24446c2c3395b96e090294aa7c5ec323f4cc9d094ce8e598a65f2556747e3d7392d763530e4c4e2e6f855e8f059a6dce3e61f3ffb9a298ac9a0423382089357bdfcf607957da7ac1783d08b401145d44a636ed7ac2c00bca64513eb56f29287d05e52f7ac87c73a84f3b47852cf0563501d", 0xf4}, {&(0x7f0000000280)="a0582101fdcd3ba0b197f84a1bbbb2fdbecfce0f09449fe570a9c9f4b7c913545411cde7ac2554e70bfe7b481976fbadccd40de9418495980b82a66275f87f219d5e7a61d56556178bc9f11f160ae1e5cfad7988face31662b050eaeafcc9d5c74bb287ab6c61d50a73407e307c3773b015bd75ba93e7e3272b1310a07879f1cb7109d165c8bc4e97b3af221dceefe730bf6a4b06aced61d4b96996e4a7d6d45d8af1ad6f200f5b3312839890974fedad4e5f94b76820d0c30a9474c8be40e9456fbe68963bc8fe19eb3f09543c98836713b46a0b4d6f479fbe1336262a866378bb45bc7f3fb33760094009b2daa4e5a29969e3827ca9fda642e417c53694bcf27bd90e8c646711a7c49be7a7d074a81df140978053dc7c66b4f910b7d7dd37d7c5de0dd4f39f41504fc16ffc715b1df413db55b19c1cf94c36b943c56ab550505778c7ba14328aaf499445fc7b44935cb0ed661f9feeca52e32d5d1b367ca97344a7a818d373226a42b22d44f84fadd271dbb618db5daea81681323281538f02c304cd100e81260eff52625b81c7b7d3d9966d743a0b926a3eaf5d1ba157247ec7c552e41589ceb7c8461e05d6014dbdd64bfedec59c90e29bddb1cb4ac457cb4f9b498d3c9bce757ee95b9316f12f7150125388665c97f71f37e71e3023a5a01dde350442e08e4cfec8378a8246ca0932295ebf03da3f86333d34d65fd3f1ce98321042b7d32e7bd3c686ef28899309309a4893dae37cbc1592ca499bc02e5ab6adea9bb38bfcf5ac30c8d0184135125287464addb79065bd846796e9fc1dde0fee3fb6e0518c1274b3cf28e4d57ddcc3ffb7f301a96f7af58ea6151d41cea8eed10d42f349f9e3d277df08d66658967035a84c52c1ca3cf6e1fda9d63d84feff5046887e29ce6e8fdb12c9924c304c4391a8d5696811ee395589c1e373e19dcb7fb3c3d9ab744f0940a0cdc9cfa41f566044ffd72bec8f18a3211adfbbd899705de76b409a9704331a0e2e02be747d78b545ed652fc2f9889f99d40d18cc907b21781c34b4f44b963145a5fe2754651a58e4d1e1a4c547b695acdf6166a444faef887ece5f0d5219cbcdcc163d81302e2ce9786388962910589f352001df02b7a920746cd90d67eb1ee706e22f37320f20b9380afb1bab18d256e3668bc9f0581f06760e1517a9a5b747424bcfaeb747f370bc60edf7cef68c7905bda1c7e9a5d28c2c5a13412416dd267699c55fbff97651512f6fb0aeece32fa6e61e3e1e648e1aabeba41219fe66de7ef4f42198ca5501d29567760527d3907d8ef2ac97b50b5bbd17f4076b827f52050686d0928b318f43b2a3fe677c566be73a7342f8c70e792872f9963f3135f8296a7d9e5a652676c2c8ff42ad85755c9f8181c1378235d5547e9b2eb25bfaeb1b9bc4ec9626e8a5b217d72f22faf35cf6fd22a61c3a6d4cfa6ba06c9d8dd4ab82e0af247a80f9ce5e0b5f41a92fcb9708907df8c0cb77ba1614320e15126beba6265f732f251b2196d0f4c02c9fd23d272a87df45103424fc1889481a63506ce93a2084fc19a6de0a504dab4ae6ea9d97163d9e36e95846289f8f59db957d6b918f50ab0873ee76671fd6df66c6e116c236b810165dd41204ed1c655cefb5c347f82b2090a5bac8f8537c09cfae65fdc86b02d23186fa0bf2342179eac8e6fc8552fccf70977d0e5d56777efcea28947f46c52fcf638884729dac97d0df4b6f424d9309b33e7f4adbea4d369d112edfde56ef6c9daaabaef4ec976dd288a84efedbb1de14d92b0b4ebc80895817d5bcce9f7d52b815eabc7f5d9c1628639bb126c6a131fc8c8f6d1426583f7530beef7b3eb94894d878550ee8a25384b33df9a9c714eb618611552f45d72b96a4bc3ff8bee2fffe50ad37665bc540666de5782b5e7eece9adf5160690edd0fea0103fce5fde657fdb92259c696d9fb516a4b6b3d4a76dbc63d2d0a9b125b86a3424b29ba36e6362a1a462d3401d3eca85bde7f8f16dfa2f37071c1d0008c77e3f369929c3b21b88afac30d70d7b25bf86e5a8399819ca1a24f7a66cd03bf0706731ecba272ae6754323996870a79b85ca10af2e3496852945c4e9a3e24e5b74b40ef255508ba17e41491b26800c5724f3ffadc4c2888826e2bc8e445c529c95a61925cde17859932024d81332c3ec0bd769dac355601fedf9a52e6f234bf3928edf72fb9a19aa08faf5a7d01dbc8760ab28e849f8dd03adbb5f3b1e0e3b5fe8fa1fcd7b3b984c6da76b65c3ba649987819fc7dbbdab8926d6f65f5f3d7ae83b69baec754df49b2756eaef71b70d7b6ec35ba3107d7458f66999e030fbbb06bf80bdbd4721dd7839241df8e4ebbf4acac61fcae8fb168d888dc34b33d80039de9cb2d51280c0b30a535c0334a648133ade9c2fd35a48ae253f7db69114a8c60c9a248cce772640a3727b2035fc3a0785fdd2d37c1ad2235a63c99aa93f401e6266e0e2d5e654bce30d57d9c6c047ab3b2a8746ea70811c57391a417ea289dbf58af1b808d7a4ca0f20feaeb275d64d657c929e78cab0e8e1002e823e8aa1b0d6346bd91188852f83667e17bc1bbb1cc2ddfe11c08ea3ccd87845d1921d4459a89f8b073f39556abe596a4417a56c0dd881390ea93d09ad2588b2aa125433cca15d4e6e574910639f018375aceb43a35bd71ae1a3268ff127a6b40f05d9e672bc1db2c6e1d9b609317ecea8d8d35f3fc9fd7a67845c1d4efe5a893d3ecc1745ff87060889dbeb14ee25b53997091876a7b414de33917daa510f7962a4127736c35b0e6a7fa1cfc889c7650a2ffea46deca140d86165d4e2a4864314d16ba4943bbaa07e76ea7e34d50ec6acdab67e0a94105ed9d443d073e3fa1974e9cf97c5da71c3b11a9c9c19bc0369e14ef9c84962db333b5012a1beff06d75b8efe6646b497695cc5a3a1263c149986f2e626278af6d39a1db80dae65485021fa0a672fd0d1d043724c30121e21937c519e74795da83d5fc9c7b18c4d6ad7be907a41f1a3e1b706e021869ccd4a60c5dcd6304fa41b3801b3c768fe5d442ff2a8f8ded6223b4a068bbcc088fc2d4e942cc261471de4f5fcbfbeed63c480a9ecb704333829d9baf5931ca88ae659b05cf7a3659ed79f4ed1c6355501fbe475046711e153d062a09a2c283c95014beefb19a19dd5fa1f0e1ed7e40ac63223b795f5daf563eeaa6e97fa3ede1e16c27f380090b66f6a5b8589799d7806b2a85a0a74eaf04ca756f5616a94f6eac74ffd4e2b21e2c2947691970b634ab14929ba0b05f7bfc4e38767f1a2766355316a271d47c905fc34877ae56797d70b8a05af32c632f4989e6bd9a9706264f0abcd2216e241a5924a5828bac3f368874b2863022eeb7a6a044f6046376e81c0ad4c199a3476b7a77e46803fc1a11a77acebcc9f507e9716741ff4598a38f6ec64db5bec0e5415a1b4104d1a952f89a90141fed0b1712c09e6a8ec353615299bbd3ec4c18213120bc962d86422acb9ce039903d2a13b7016fc15fda62ae698f4138f5a21efbac54d2afb4453b0ac29543bc55af4c5001459f3ace5efe88dfd3c34f0cc9079451abf516901e2f4178ddc68900fbe0417d6b5e670640f5554b2563c77d1e1039d51a800bc3528f2d84f57ea40b29160a268a62d92e11148db2bd488be33d9f9ba55ac76246fc967876917db847ef888fc6d41a6e505e1cfe5ccac0a50a279f9344d98a8ed45adfd40d658eab5420be68a0780141e193357501d148ab509a1fbe724ed45377ab068d92d70c7849798989acd6c4ee79345d372c7468c3672cf7586a6220d57aa020197d76c34b4fd55e66583e6739463cf56c53197ca94be407f25ea79a213f8b5fce79166f694ed653bd414b5fd7079c895b9498718746ed0b8e17b14222417b17d83d4e6383371f31ace90e77874f1c000813515717a5977c72647323ef9a995aec5f1b1ccdedd73a4ac8d34991c5e950f9c92643628ed075169a6be4535422a34ba66ae3ab17c4902f4e1220ab14651513f6d4093c93bcc32fe8862c52ba1b90543915df8304439b4ef1e4446e4cc59f845a57fea5abc7f893f5bc79d3c6e7f8f47fc8f54545b1754f980e4efae5eb042f43bada8d7f36d3dc94c9c06a5a51496a211564e44b00fa9bbbc0874ad392d36dc2e6edaee91ef519e9701f3b9dd0addaa7e515c2b7938f27a1f349dd7012a647688833956dbefa79c07ce4e9c4f37c2bf4c8cb03da6dd3bf99feeb9025a20247ea84ea3003f11ebf38b92fc7da04b69a020e662e513cf5f5ff7ff34268da1fa746049b1942f805720605507c58f86ef9a3a3657605b1ae8e3302ddb2b2eefaac861aee091906f96b6b856a761807141b95aa60d39fb8e32c180a2c432eb7d10ddae7a3d94d36bf3c8321c1d4f05070d7a839905eecdf0cc47488c1fab1b9a46f28fc65ec4c0cd8ecfae7fad48d7b06176220e0fea08c0976fe54247f13bc3d4319e28f726456ea4a691919114d75188924c15ee5b69541f967f7a2ee7c6edefc2769a14822ea9b9ff58323cd466a0a49fe3f9e359e71aebbed04de709ab9cf0aa5678a1fe95626d4002c821d384fe7b4adf73387b62b269af1c1bdc57dfa687dfd3c731c9ef92c460d6d52633c2c2f941ff7fc34aa8c7bca96fca7a9fc383be30f6bd2ce5a49955f5720546ee288f49d1d094febefa15f5db16e3e97b84e64c213204db15b0ca40c35cd241c3d12bc74c3f5843ddf6dc43bb6cb5d7213a162a9b40631a7c1ab47fbde5a2d6ebf468f0e5c3e6bdaf97ee2a84bfba811f1f1588328005136f66851713898775b930ba6038a44ca53c48657a1c04378bfbedd74cf3ea6836ece15a3a4e1e2a878a2b707e4aefc8da636f585395d89c42e7762880e5d2dfef1a27ac52a7f93495d0a0cc3181207eda58bbd398d833af17092e6ee64a0fce54afd9705a37867d7a55893ad4fd29aadd0d15fa5bfe24e2767083d7e2a6e8884b3be8a08bb63b12c1817c7658a936221bf1d9895e70794b826f50f99f27a0ca5e653a0a6653ab638447aa912e2c8242d8961ea703753a0fec58089d05d25509fbda9e91a1fda9558038a347a598adf23271f2fcb3d0b215e4abf3f5aa7f9ae26872ffe2dfcf4e6923876c93b65b71b3482e3b6a0467bd29d9548deedd613f858aed3fef1e9ae9c78010a60eafc278e7756e8a4f78474154a2a4a8eb82c1e794de45abef2c3262bba91c6d3f90a7a9f7a2227b242bbae0e26d63074c5e2cc51d5dbddf631095a1f5eb47ee7393148ee8c", 0xe90}, {0x0}], 0x3}, 0x0) 10:51:45 executing program 3: setrlimit(0x8, &(0x7f0000000000)={0x3, 0xfffffffffffffffc}) socketpair(0x1, 0x2, 0x0, 0x0) 10:51:45 executing program 1: faccessat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0) 10:51:45 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup2(r0, r0) ioctl$TIOCOUTQ(r1, 0x40047309, 0x0) 10:51:45 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000fee000/0x1000)=nil, 0x0) 10:51:45 executing program 5: mkdir(&(0x7f0000000000)='./file\x00', 0x0) 10:51:45 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights], 0x10}, 0x5) 10:51:45 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights], 0x10}, 0x0) 10:51:45 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000067c0)={0x0, 0x0, 0x0}, 0x0) 10:51:45 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x478}, 0x0) 10:51:45 executing program 4: execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000009000)='./file0\x00') 10:51:45 executing program 5: semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)) 10:51:45 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff) 10:51:45 executing program 2: r0 = getegid() getgroups(0x1, &(0x7f0000000000)=[r0]) setregid(r1, r0) 10:51:45 executing program 3: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000280)={{}, {0x0, 0xffffffffffffffff}}, 0x0) 10:51:45 executing program 0: shmget(0x3, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 10:51:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001440)={&(0x7f0000000140)=ANY=[], 0x10, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000000280)="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", 0x841}, {0x0}], 0x3}, 0x0) 10:51:45 executing program 5: setrlimit(0x8, &(0x7f0000000000)) socket$unix(0x1, 0x2, 0x0) 10:51:45 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @remote, @val, {@ipv4}}, 0x0) 10:51:46 executing program 0: symlink(&(0x7f0000000180)='./file1\x00', &(0x7f00000003c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10288, 0x0) 10:51:46 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_cred(r0, 0xffff, 0x1022, 0xffffffffffffffff, 0x0) 10:51:46 executing program 3: open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x202, 0x0) 10:51:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa) 10:51:46 executing program 5: r0 = socket(0x18, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs, 0x8) 10:51:46 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) lchown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) 10:51:46 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x148) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 10:51:46 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r0, 0x0, 0xffffffffffffff33, 0x0, 0x0, 0x0) 10:51:46 executing program 0: r0 = socket(0x1, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, 0x0, 0x0) 10:51:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10288, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0) 10:51:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000001ec0)=[{0x0}, {0x0}, {0x0}, {0x0, 0x56}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 10:51:46 executing program 1: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5) 10:51:46 executing program 2: setitimer(0x0, &(0x7f00000000c0)={{}, {0xfffffffffffffffe}}, 0x0) 10:51:46 executing program 3: r0 = socket(0x18, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, 0x0, 0x0) 10:51:46 executing program 0: open$dir(&(0x7f0000000100)='./file0\x00', 0x3e763303585b93e1, 0x0) 10:51:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10288, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:51:46 executing program 4: symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/107, 0x6b) 10:51:46 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00') 10:51:46 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 10:51:46 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000100)=0x8) 10:51:46 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 10:51:46 executing program 5: syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) 10:51:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x2}, 0x8) 10:51:46 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) listen(r0, 0x0) 10:51:46 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x1fbffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 10:51:46 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) 10:51:46 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 10:51:46 executing program 3: unshare(0x20400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000)) 10:51:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0xdc85e9963031fcc5}, 0x14}}, 0x0) 10:51:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private}, 0x0, r2}) 10:51:46 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fchown(r0, 0x0, 0xffffffffffffffff) 10:51:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)) 10:51:46 executing program 5: clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x800}, &(0x7f00000001c0), &(0x7f0000000240)={0x0, r0+10000000}, 0x0) 10:51:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x2000c094) 10:51:46 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002e40)={&(0x7f0000001dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000001e40)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 10:51:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @dev, 0x2}], 0x1c) 10:51:46 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{0x5}, {}, {0x16}]}) 10:51:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454da, 0x0) 10:51:46 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0}) pselect6(0x40, &(0x7f0000000140), &(0x7f0000000180)={0x8}, 0x0, &(0x7f0000000280)={r0}, 0x0) 10:51:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x9, 0x1, 0x5, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 10:51:46 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000400)=@framed={{}, [@alu={0x4, 0x0, 0x5}]}, &(0x7f0000000480)='GPL\x00', 0x7, 0xce, &(0x7f00000004c0)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f00000001c0)="53000010000010090000000d000000548fa6336f0100010000000000000000ff9a177f7b3f1e6e0b19c9ba873faa", 0x2e}], 0x2) 10:51:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xd) ioctl$TIOCVHANGUP(r0, 0x540b, 0x0) 10:51:46 executing program 2: ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x40001, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000280)) [ 326.526640][ T25] audit: type=1326 audit(1645786306.762:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11681 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9544e99059 code=0x0 10:51:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/216, 0xd8}], 0x1, 0x0, 0x0) 10:51:47 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000180)={0x3}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x8, 0x0) 10:51:47 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 10:51:47 executing program 2: ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x203, 0x0) 10:51:47 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7a9, 0x0) 10:51:47 executing program 0: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) r4 = io_uring_setup(0x5173, &(0x7f0000000180)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}, 0x0) r5 = dup3(r3, r4, 0x0) bind$rxrpc(r5, &(0x7f0000000280)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @dev}}, 0x24) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 10:51:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xd) ioctl$TIOCVHANGUP(r0, 0x540b, 0x2) 10:51:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @dev, 0x2}], 0x1c) 10:51:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xd) ioctl$FIONREAD(r0, 0x5411, &(0x7f0000000000)) 10:51:47 executing program 2: ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x203, 0x0) 10:51:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x1, 0xd}) 10:51:47 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x40001, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 10:51:47 executing program 4: syz_usbip_server_init(0x1) geteuid() geteuid() 10:51:47 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x85ffffff}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001140)={&(0x7f0000000d40), 0xc, &(0x7f0000001100)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) [ 327.614957][T11721] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 327.621516][T11721] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) 10:51:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f00000001c0)="53000010000010000000000d000000548fa6336f0100010000000000000000ff9a177f7b", 0x24}], 0x2) [ 327.680411][T11721] vhci_hcd vhci_hcd.0: Device attached 10:51:47 executing program 2: recvfrom$packet(0xffffffffffffffff, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x40001, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000280)) rt_sigsuspend(&(0x7f00000002c0)={[0x5]}, 0x8) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) [ 327.739254][T11723] vhci_hcd: connection closed [ 327.740162][ T5804] vhci_hcd: stop threads [ 327.773825][ T5804] vhci_hcd: release socket [ 327.800947][ T5804] vhci_hcd: disconnect device 10:51:48 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:48 executing program 5: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) r4 = io_uring_setup(0x5173, &(0x7f0000000180)) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}, 0x0) r5 = dup3(r3, r4, 0x0) bind$rxrpc(r5, &(0x7f0000000280)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @dev}}, 0x24) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 10:51:48 executing program 1: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:48 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 10:51:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00') pread64(r0, &(0x7f00000191c0)=""/102394, 0x18ffa, 0x0) 10:51:48 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x40001, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000280)) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 10:51:48 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:48 executing program 3: pipe2(&(0x7f0000000a40), 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 10:51:48 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x22, &(0x7f0000000300), 0x4) 10:51:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:48 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x5452, &(0x7f00000012c0)) 10:51:48 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f0000000300), 0x4) 10:51:48 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x8, 0x4, &(0x7f00000015c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:48 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001640)=@bpf_tracing={0x1a, 0x3, &(0x7f0000001480)=@framed, &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf721}, 0x70) 10:51:48 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:48 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x4020940d, &(0x7f00000012c0)) 10:51:49 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f0000000300), 0x4) 10:51:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@kfunc]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:49 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0xe, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 10:51:49 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d0002, 0x0) 10:51:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xa6, &(0x7f0000000100)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x8, 0x3, &(0x7f0000000000)=@framed={{}, [], {0x95, 0x72}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000b80)={&(0x7f0000000a40)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000000b40)=[@mark={{0x14}}], 0x18}, 0x0) 10:51:49 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x40049409, &(0x7f00000012c0)) 10:51:49 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x90101, 0x0) 10:51:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x1, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:49 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r0}, 0x10) 10:51:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0xf803}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:49 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000300), 0x4) 10:51:49 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x2, 0x0, 0x0, 0x48}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:49 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x98e1bc27bcdd7daf, 0x0, 0x0, 0x0}, 0x20) 10:51:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0xbc, &(0x7f0000000140)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:49 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) 10:51:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'gretap0\x00'}) 10:51:49 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0xe, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xfff, &(0x7f00000000c0)=""/4095, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001380)={0x9}, 0x8) 10:51:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1b, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x7, 0xbc, &(0x7f0000000140)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000680)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 10:51:49 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x8, 0x3, &(0x7f0000000000)=@framed={{}, [], {0x95, 0x0, 0x0, 0xffffff80}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:49 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2c, &(0x7f0000000300), 0x4) 10:51:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x7, 0xbc, &(0x7f0000000140)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:49 executing program 0: memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r0, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:49 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 10:51:49 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x2, &(0x7f0000000280)=@raw=[@map_fd], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:49 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00'}, 0x10) 10:51:49 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, &(0x7f0000000300)=""/137, 0x1a, 0x89, 0x1}, 0x20) 10:51:49 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) 10:51:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x2, &(0x7f0000000080)=@raw=[@initr0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:49 executing program 0: memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r0, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:49 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0xe, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001580)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 10:51:49 executing program 3: ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x200000, 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)="0e9075add43f545d2c9e7162d334a41469619eb0899573c3f59f84fa7f174958d79a3c1757b1796b51607759dc63c88b33c346ab54316ab802971136a6c225a78daea0e9f6a98b506c00a807b92cc6cfafacdddf23eaf207c9ccfcd5c36f39ebe0401e30183562de") 10:51:49 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map, r0}, 0x14) 10:51:49 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 10:51:49 executing program 2: bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r0 = gettid() syz_open_procfs$namespace(r0, 0x0) 10:51:49 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000)="f3", 0x0}, 0x20) 10:51:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x48) 10:51:50 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x38}, 0x11) 10:51:50 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x14}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd, @func_proto, @typedef={0x0, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000280), 0x40}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 10:51:50 executing program 0: memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r0, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:50 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) syz_clone(0x60000100, 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)) 10:51:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f0000000100)='syzkaller\x00', 0x6, 0xdd, &(0x7f0000000140)=""/221, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 10:51:50 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x1, &(0x7f0000000040)=@raw=[@func], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:50 executing program 2: socketpair(0x1f, 0x0, 0x0, &(0x7f0000000080)) 10:51:50 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r0, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a}, 0x48) 10:51:50 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="9f98bc8f9bc8432f58f6b189a4e0", 0xe, 0x40, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) 10:51:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_bridge\x00'}) 10:51:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001480)={&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) 10:51:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) sendmsg(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x180}, 0x0) 10:51:50 executing program 2: syz_clone(0x19020080, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) 10:51:50 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9}, {0x0, 0x4}]}]}}, &(0x7f00000003c0)=""/221, 0x36, 0xdd, 0x1}, 0x20) 10:51:50 executing program 4: syz_clone(0x40001000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 10:51:50 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r0, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:50 executing program 1: syz_clone(0x19020080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:51:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000001c0)=@raw=[@jmp, @map_fd], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xcb, &(0x7f0000000240)=""/203, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:50 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x46003, 0x0) 10:51:50 executing program 2: syz_clone(0x1812c000, 0x0, 0x0, 0x0, 0x0, 0x0) 10:51:50 executing program 1: syz_clone(0x60000100, &(0x7f0000000080)='f', 0x1, 0x0, 0x0, 0x0) 10:51:50 executing program 5: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x259dc1debe99c743}, 0x20) 10:51:50 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r0, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:50 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000400)=""/4096, 0x29, 0x1000, 0x1}, 0x20) 10:51:50 executing program 2: socketpair(0x2, 0xa, 0x8cc, &(0x7f0000000000)) 10:51:50 executing program 5: syz_clone(0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)="371e0e6d93ed9f0f202f9c3ec6d129f8e182783181bb16005122d5584a0f090e9e75f766db7a0be8ef8d42c42de0f04b6b") 10:51:50 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x6e000, 0x0) 10:51:50 executing program 3: syz_clone(0x94c200, 0x0, 0x0, 0x0, 0x0, 0x0) 10:51:50 executing program 2: syz_clone(0x9f3b23b664db676c, 0x0, 0x0, 0x0, 0x0, 0x0) 10:51:50 executing program 0: r0 = memfd_create(0x0, 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x17}, 0x48) 10:51:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'sit0\x00', 0x400}) 10:51:51 executing program 1: socketpair(0x10, 0x2, 0x1000, &(0x7f0000000000)) 10:51:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'wlan1\x00', 0x600}) 10:51:51 executing program 0: r0 = memfd_create(0x0, 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:51 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) 10:51:51 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000001500), 0x169140, 0x0) 10:51:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 10:51:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_type(r0, 0x0, 0x0) 10:51:51 executing program 0: r0 = memfd_create(0x0, 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 10:51:51 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100), 0x10) 10:51:51 executing program 3: socketpair(0x23, 0x0, 0x4c3, &(0x7f0000000080)) 10:51:51 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001400)}, 0x80) 10:51:51 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00'}, 0x10) 10:51:51 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:51 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_ext={0x1c, 0xa, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:51 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x400001, 0x0) 10:51:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2aaaaaaaaaaaaab7}) 10:51:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x4020940d, &(0x7f00000000c0)) 10:51:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'team0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'ipvlan1\x00', 0x200}) 10:51:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x1, 0xc, [@multicast, @link_local, @link_local, @multicast, @broadcast, @multicast, @empty, @multicast, @link_local, @broadcast, @broadcast, @multicast]}) 10:51:51 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x13, 0x0, 0x0) 10:51:51 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f00000012c0)={&(0x7f0000001280)='.\x00'}, 0x10) 10:51:51 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:51 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000014c0), 0x301400, 0x0) 10:51:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000003"]) 10:51:51 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000340)) 10:51:51 executing program 2: syz_clone(0x1482c000, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 10:51:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'hsr0\x00', 0x400}) close(r0) 10:51:51 executing program 3: syz_clone(0x1482c000, 0x0, 0x0, 0x0, 0x0, 0x0) 10:51:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000004b00)={0x0, 0x0, 0x0}, 0x0) 10:51:51 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)) 10:51:51 executing program 5: openat$cgroup(0xffffffffffffffff, &(0x7f0000002240)='syz0\x00', 0x200002, 0x0) 10:51:51 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_ext={0x1c, 0x1, &(0x7f0000001640)=@raw=[@func], &(0x7f0000001680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000016c0), 0x8, 0x10, 0x0}, 0x80) 10:51:51 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:51 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 10:51:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)=0x1) 10:51:51 executing program 5: unlink(&(0x7f0000000680)='./file0\x00') 10:51:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000040)={'ip_vti0\x00'}) 10:51:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x335) 10:51:51 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00', 0xf02}) 10:51:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x800454d2, 0x20000000) 10:51:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'ipvlan1\x00'}) 10:51:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) 10:51:52 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x13) 10:51:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x2, &(0x7f0000000040)={'ip_vti0\x00'}) 10:51:52 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x3}, 0x10) 10:51:52 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:52 executing program 1: syz_clone(0x40002000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) 10:51:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'macvtap0\x00', 0x1}) 10:51:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNDETACHFILTER(r0, 0x800454d7, 0x0) 10:51:52 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) 10:51:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'team0\x00', 0x400}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:51:52 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) 10:51:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000180)) 10:51:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000001900)={&(0x7f00000012c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000017c0)=[{0x0}], 0x1, &(0x7f0000001840)=[@mark={{0x14}}, @timestamping={{0x14}}], 0x30}, 0x0) 10:51:52 executing program 4: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x6, 0x0, 0x0) 10:51:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'wlan0\x00', 0x1}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)) 10:51:52 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:53 executing program 1: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000005c0), 0xffffffffffffff0f) 10:51:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNDETACHFILTER(r0, 0x401054d5, 0x0) 10:51:53 executing program 5: syz_clone(0x1482c000, &(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="3e43bd39ab82843188498b0436953e138d3613a6b551ecf5fe71e9726b00171cb8679c910cab25736282acf3dbb12bc960279d1302a7977e10834e54bd075155837c") 10:51:53 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={0x0, 0x0, 0x18}, 0x10) 10:51:53 executing program 2: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002940)={&(0x7f0000002900)='./file0\x00'}, 0x10) 10:51:53 executing program 0: memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r0, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:53 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 10:51:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETTXFILTER(r0, 0x800454d7, &(0x7f0000000080)) 10:51:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x0, 0xa, [@broadcast, @remote, @link_local, @multicast, @random, @multicast, @empty, @remote, @broadcast, @local]}) 10:51:53 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000000580)="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", 0xfffffeff}], 0x8}, 0x4800) close(r0) 10:51:53 executing program 0: memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r0, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ip6_vti0\x00', 0x8000}) 10:51:53 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1a, 0x0, 0x0) 10:51:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETTXFILTER(r0, 0x8927, &(0x7f0000000080)) 10:51:53 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000180)=""/206, 0x2e, 0xce, 0x1}, 0x20) 10:51:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNDETACHFILTER(r0, 0x400454d1, 0x0) 10:51:53 executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001580)='3', &(0x7f0000001680)="0e"}, 0x48) 10:51:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000004b00)={0x0, 0x0, 0x0}, 0x140) 10:51:53 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4c002, 0x0) 10:51:53 executing program 0: memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r0, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:53 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x10142) 10:51:53 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000004000000007fffffff8500000023000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) 10:51:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNDETACHFILTER(r0, 0x400454d0, 0x0) 10:51:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETTXFILTER(r0, 0x800454dd, &(0x7f0000000080)) 10:51:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'ip6tnl0\x00', 0xc00}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'team0\x00', 0x400}) 10:51:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000080)) 10:51:53 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x303}) 10:51:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x0, 0x4, [@dev, @empty, @local, @empty]}) 10:51:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNDETACHFILTER(r0, 0x800454d2, 0x208254957f0000) 10:51:53 executing program 4: syz_clone(0x1482c000, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000100)="3e43bd39ab82843188498b0436953e138d3613a6b551ecf5fe71e9726b00171cb8679c910cab25736282acf3dbb12bc960279d1302a7977e10834e54") 10:51:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000a00ffffffffffffaaaaaaaaaabb0180c2000000bbbbbbbbbbbb000000000000bbbbbbbbbbbb000000000000aaaabcaaaabbffffffffffffb9"]) 10:51:53 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'hsr0\x00', 0x400}) 10:51:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) write$cgroup_type(r0, 0x0, 0x0) 10:51:53 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) 10:51:53 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400), 0xc) 10:51:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 10:51:53 executing program 5: bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x9) 10:51:53 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x2}) close(r0) 10:51:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000002200)) 10:51:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) 10:51:54 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_ext={0x1c, 0x1, &(0x7f0000001640)=@raw=[@func], &(0x7f0000001680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x5e9a}, 0x80) 10:51:54 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:54 executing program 5: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x10) 10:51:54 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000004b00)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000004a00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000004ac0)}, 0x140) 10:51:54 executing program 1: bpf$LINK_DETACH(0x22, &(0x7f0000001980), 0x4) 10:51:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) 10:51:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0xf02}) close(r0) 10:51:54 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup, 0xffffffffffffffff, 0xa}, 0x10) 10:51:54 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='>') 10:51:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x2, &(0x7f0000002200)) 10:51:54 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:51:54 executing program 2: mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_ext={0x1c, 0x1, &(0x7f0000001640)=@raw=[@func], &(0x7f0000001680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5e9a}, 0x80) 10:51:54 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0xa, 0x0, 0x0, 0x0}, 0x20) 10:51:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 10:51:54 executing program 3: syz_clone(0x0, &(0x7f0000000580), 0x0, 0x0, &(0x7f0000000640), 0x0) syz_clone(0xc1801000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 10:51:54 executing program 2: socketpair(0x10, 0x0, 0xf, &(0x7f0000000040)) 10:51:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000003140), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x5452, 0xfffffffffffffffd) 10:51:54 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000001540)={&(0x7f0000001500)='./file0\x00'}, 0x10) mkdir(&(0x7f0000001640)='./file0\x00', 0x0) 10:51:54 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, 0x0, 0x0, 0x4c00) 10:51:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x800454dd, 0x0) 10:51:54 executing program 5: bpf$MAP_CREATE(0x2, &(0x7f0000000140), 0x48) 10:51:54 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, 0x0, 0x0, 0x4c00) 10:51:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000ac0)={&(0x7f00000000c0)=@tipc, 0x80, 0x0, 0x0, &(0x7f0000000b00)=[{0x10}], 0x10}, 0x0) 10:51:54 executing program 1: syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x13, 0x0, 0x2, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) r0 = syz_clone(0x50000000, &(0x7f0000000080)="71fb6a7028d7838d66faa683c3b12a558019231fa97eaf6bc0136d315ce2b481003e8dab187733741b4bbca74ed02b1490", 0x31, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="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") syz_open_procfs$namespace(r0, &(0x7f0000001180)='ns/mnt\x00') openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) 10:51:54 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000080)=@raw=[@map_fd], &(0x7f00000000c0)='GPL\x00', 0x1, 0xaa, &(0x7f0000000100)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0xd, 0x1, 0xffffffff}, 0x48) 10:51:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x2, 0x0, 0x0, 0x0, 0x6}, 0x48) 10:51:54 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, 0x0, 0x0, 0x4c00) 10:51:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)="c4", 0x1}], 0x1}, 0x8c0) 10:51:54 executing program 4: syz_clone(0x80004000, 0x0, 0x0, 0x0, 0x0, 0x0) 10:51:54 executing program 1: socketpair(0x11, 0x2, 0x6203, &(0x7f0000000180)) 10:51:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x5, 0x6, 0x9, 0xd, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000011c0)={r0, 0x0, 0x0}, 0x20) 10:51:54 executing program 5: socketpair(0x10, 0x0, 0xc, &(0x7f0000000040)) 10:51:54 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=0x1, 0xffffffffffffffff, 0x5}, 0x10) 10:51:54 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) 10:51:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wg2\x00', 0x2}) 10:51:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454d0, 0x0) 10:51:55 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202100, 0x0) 10:51:55 executing program 1: bpf$MAP_CREATE(0xd, &(0x7f0000000140), 0x48) 10:51:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cc, 0x0) 10:51:55 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x90b839bcc28aafe2, &(0x7f00000001c0)}, 0xfffffffffffffd65) 10:51:55 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@txtime={{0x18}}], 0x18}, 0x0) 10:51:55 executing program 5: syz_clone(0x81801000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc1801000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000640), 0x0) syz_clone(0x0, &(0x7f0000000580), 0x0, &(0x7f0000000600), &(0x7f0000000040), 0x0) getpid() 10:51:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x40087602, 0x0) 10:51:55 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x6, &(0x7f0000000040)=@framed={{}, [@kfunc, @initr0]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 10:51:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x2}, 0x48) 10:51:55 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x3, 0x8, 0x7}, 0x48) 10:51:55 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @exit]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:55 executing program 2: syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) r0 = syz_clone(0x50000000, &(0x7f0000000080)="71fb6a7028d7838d66faa683c3b12a558019231fa97eaf6bc0136d315ce2b481003e8dab187733741b4bbca74ed02b14901b56d099b58a3b4744b74883f75ba502f7ce", 0x43, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="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") syz_open_procfs$namespace(r0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001200), 0x2, 0x0) 10:51:55 executing program 3: socketpair(0xa, 0x2, 0x11, &(0x7f0000000040)) 10:51:55 executing program 1: syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x50000000, &(0x7f0000000080)="71fb6a7028d7838d66faa683c3b12a558019231fa97eaf6bc0136d315ce2b481003e8dab187733741b4bbca74ed02b14901b", 0x32, &(0x7f0000000100), 0x0, &(0x7f0000000180)) 10:51:55 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x1}, 0x10) 10:51:55 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 10:51:55 executing program 1: syz_clone(0x21020400, 0x0, 0x0, 0x0, 0x0, 0x0) 10:51:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x9, 0x2, 0x2c, 0x2cdd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) 10:51:55 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001bc0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 10:51:55 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x2}]}]}}, &(0x7f0000000480)=""/250, 0x36, 0xfa, 0x1}, 0x20) 10:51:55 executing program 5: syz_clone(0xc1801000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc102100, &(0x7f0000000680)="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", 0x981, 0x0, 0x0, 0x0) 10:51:55 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x9, 0x2, 0x2c, 0x3}, 0x48) 10:51:55 executing program 2: socketpair(0x18, 0x0, 0x8000, &(0x7f0000000400)) 10:51:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) close(r0) 10:51:55 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x5, 0x6, 0x9, 0xd, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x10) 10:51:55 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000480)=""/250, 0x3c, 0xfa, 0x1}, 0x20) 10:51:55 executing program 1: bpf$MAP_CREATE(0x6, &(0x7f0000000140), 0x48) 10:51:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) 10:51:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 10:51:56 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001980)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001640)='9', 0x1}], 0x4}, 0x0) 10:51:56 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x18, 0xd, &(0x7f0000001440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x93, &(0x7f0000001a80)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:56 executing program 1: syz_clone(0xc1801000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000640), 0x0) 10:51:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001880)={&(0x7f0000001180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x3e80}, 0x0) 10:51:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:51:56 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x9, 0x2, 0x2c, 0x2cdd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) 10:51:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x5, 0x6, 0x9, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xc000000}, 0x48) 10:51:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0x18}, 0x48) 10:51:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)) 10:51:56 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x18}, 0x48) 10:51:56 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet_sctp(r1, &(0x7f00000006c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)='x', 0x1}], 0x1, &(0x7f0000000600)=[@dstaddrv6={0x1c, 0x84, 0xa, @remote={0xfe, 0x80, '\x00', 0x0}}], 0x1c}, 0x0) 10:51:56 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 10:51:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000000)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@dstaddrv6={0x1c, 0x84, 0xa, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}], 0x1c}, 0x0) 10:51:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000180)='Y', 0x1, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 10:51:56 executing program 0: setitimer(0x0, &(0x7f00000001c0)={{}, {0x0, 0x2569}}, 0x0) getitimer(0x0, 0x0) 10:51:56 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 10:51:56 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x2}, 0x1c) 10:51:56 executing program 0: r0 = socket(0x1c, 0x10000001, 0x84) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000080)='}', 0x1}], 0x1, &(0x7f0000000440)=[{0xc}, {0xc, 0x84, 0x1}, {0xc}], 0x24}, 0x0) 10:51:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) r1 = dup(r0) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000001c0)="e8842fc055f59f6c040afb48919626903421d1d8013e19d0b9550b1a88413f173a373be56ce079a837de35045468df004df41451d8c7b181dba2f051", 0x3c}, {&(0x7f0000000240)="c7e6c8554829b6f430af4b7bdb98fadf2056c9a8b6310cf4e976eaf0962d17a975498b2b17eb152a85cb897ec78211a318d695ab4cb3a004cd7d", 0x3a}, {&(0x7f00000002c0)="0a19ff772e34a4453a79a0724335d11796f9e968e1e8433cd06ba5959f1b6cff60f28ac52345d3da1e9e56f50bfe569851fc92", 0x33}, {&(0x7f0000000380)="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", 0x504}], 0x4}, 0x0) 10:51:56 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 10:51:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) r1 = dup2(r0, r0) getsockname$inet6(r1, 0x0, &(0x7f00000001c0)) 10:51:56 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) sendmsg$unix(r2, &(0x7f0000002940)={&(0x7f0000000080)=@file={0xa}, 0xa, 0x0, 0x0, &(0x7f0000002800)=[@cred, @cred], 0xc0}, 0x0) 10:51:56 executing program 0: setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x4004b25}}, 0x0) 10:51:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)=0x10) 10:51:56 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000340)=0x101, 0x4) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000080)='\'', 0x1}], 0x1}, 0x0) 10:51:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040), 0x98) 10:51:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000000)=0x84) 10:51:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) sendmsg$inet_sctp(r2, &(0x7f0000001280)={&(0x7f0000000140)=@in={0x10, 0x2}, 0x10, 0x0}, 0x81) 10:51:56 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="fa", 0x1}], 0x1}, 0x20048011) 10:51:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x24, &(0x7f0000000380), &(0x7f0000000000)=0x98) 10:51:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 10:51:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) sendmsg$inet_sctp(r2, &(0x7f0000001280)={&(0x7f0000000140)=@in={0x10, 0x2}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0xff1}], 0x1, &(0x7f0000001240)=[@sndinfo={0x1c, 0x84, 0x4, {0x3, 0x6900}}], 0x1c}, 0x81) 10:51:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f00000001c0)={0x10, 0x2}, 0x10) dup2(r0, r1) 10:51:57 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f00000004c0)={0x1c, 0x1c, 0x2}, 0x1c) 10:51:57 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x108, &(0x7f0000000040), &(0x7f0000000080)=0x18) 10:51:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup(r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r3}, 0x10) 10:51:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x21, &(0x7f0000000400), 0x10) 10:51:57 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstaddrv4={0x10, 0x84, 0x9, @remote={0xac, 0x14, 0x0}}], 0x10}, 0x0) 10:51:57 executing program 3: setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x101}}, 0x0) 10:51:57 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @random="eba0dd705a9a", @val, {@ipv4}}, 0x0) 10:51:57 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000100)=0x8) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) r4 = dup(r3) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x108, &(0x7f0000000040)={r2}, &(0x7f0000000080)=0x18) 10:51:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000580)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000080)="f8", 0x1}], 0x1, &(0x7f00000005c0)=[@dstaddrv4={0x10, 0x84, 0x9, @multicast2}, @sndrcv={0x2c}], 0x3c}, 0x0) 10:51:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x14) 10:51:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000002780)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000080)='6', 0x1}], 0x1}, 0x0) 10:51:57 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup(r0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x6, 0x1, "d1"}, 0x9) 10:51:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 10:51:57 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], &(0x7f0000001700)=0x8) r3 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x15, &(0x7f00000003c0)={r2}, &(0x7f0000000440)=0x8) 10:51:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000180), &(0x7f0000000240)=0x98) 10:51:57 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) r1 = dup(r0) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000001c0)="e8842fc055f59f6c040afb48919626903421d1d8013e19d0b9550b1a88413f173a373be56ce079a837de35045468df004df41451d8c7b181dba2f05169b7cbd300106b13d4ce20fb1b446add732e", 0x4e}, {&(0x7f0000000240)="c7e6c8554829b6f430af4b7bdb98fadf2056c9a8b6310cf4e976eaf0962d17a975498b2b17eb152a85cb897ec78211a318d695ab4cb3a004cd7d", 0x3a}, {&(0x7f00000002c0)="0a19ff772e34a4453a79a0724335d11796f9e968e1e8433cd06ba5959f1b6cff60f28ac52345d3da1e9e56f50bfe569851fc92", 0x33}, {&(0x7f0000000380)="bba6221a5bba8f59fc460e54098fe85f71ba1d834e91f87abfb3e6a8cfb35bcc92a5d86b25d6f0d76b3bfc1b98f4a284d9d7ddf2e8078484642af90313ab44be95d527a63e05aab5a8be7f5f2e231e374dc8deb864225cd600233c6861a51bb6863922224041e7371f4b4a07f89113aff741973d6d944e47ef950746ecf98b75d1cdec24ca45d9762f69830f601156ca2d07864e38b9b083ec3712f5926f3b54a7c495d2b9ca2173524dcc93241556d1e839b8609273ef6bde07d964101ae6e452290cacf65d775cd4019738bd6705b4c74a8cd344c90eb0871fa048d48fc0cc1e73ff289baf615e677cf98a84f30064601c79ec88f34ab6d7aa341343459289bb99157960f12cfedd1cca728aaed3e01eaf7b081d0df181754ccd1ce5d9dc88bf5c859113e7148ad1de0dcec89afb64db540ed8761bea1390d2640e4d851e92dbf718c2815ff46b74dc5e84dbcb099ed1f9ded6498c1455d64972d1b72799880cb00cf9944a1f9aa5eebd8c151cd7925db93160499d21a42495b0c75e2654da56f11a7a7d5eb22b84e81f070a8d16c79df22f18d17e90b5d17e52083e21674c6a990c914a814b46a97c6b33c66a707a6d777debded45262b2698703cf0982374b9070969696c7584bde54cd7962f3ae96d304af9d48c62e27a701a8a4d13cd3d4c265d13d223c3c9c7eebdb0fba5715154729f4594afadd39ff76d9abdabda81b91286ed6ffdd3b4c05c2dd888dd1bea0a7ae40fe2c7aaac6602e6d8a61447e2dd25080d59a8098b57f65cc93130e80cef9d62604561de6a168d8f637aa833ea1abc0b46d16375612f1c4eed370caf16cfa956eb78c5d4a03c6d9f081b6e7c444f3133990d9e5119ce49e7b61a0860a432a345b8b8cc5de4e8c978d4070e86a373525563739758cdf20b048bb01aa2db233e4028201e316557eec32b34e4bab9cc4986e1d7b34387451de802c5d59b414485170b4a7574b6ae5e5ccd8e121f7b3909abe2cc60b72aefd718094e2b87a78e2cede2be5deb6ed522441c705d7c57c82f8cff476bff598abb662b9fb9c69da5b119e8aeda52873ae747e4a4b0ffedaab1ae2be7abd4d2a06939aee02aca6e2d3f2bbe1c56bbb422569d2f86f7123e7ad53a59d75894eac5e99ecd58f160bc8b9a59549e34a08b755c83a5c53df2cf3ce2271d566b484629bf35cea370fe35a1a9849a7b7cd0f014704083466fa868a8173f660e48b3b67cd38639f54970674c0fc3047815a5b5d6a0083553d294667c9bb4743a01696bd5b5a60273bd5c4bf460d9b72224c055f432ffdced9948624caf66561766c58f3b302c8fdbdec1ca47a9ae2fb32d10a82e62396a7c5e566652142e6bad342fd3a2772fae9b0747eb0e4f1e35b4e6a2f075fc4d0a7e8bd0f6c935d4c3ddd10639f0d5a2eceddcc74b8ac9ac94e842c9174eab4f58420470603e6ed5c1fd6334fa5dfe23ae9bbc57d765796f9b711dd70b6b20962a47139f737526a8852a81eb69996f3e335ec1e07f7eb5cf0ee63a4b1f6ae063dbd1163ebce2e8ae2b7861fe787a331d7f5b469f5741cc27bbbd043ee84d9749e37a7df2a7583896e4885f21914c3248d9505249b2e39c17123da8f519c963bc2c5e3d3c4d8c440d1cbc81a0fdbc337949663bdf7403defc09e6186b8ff9551910aab79767080fa7ab2a9795ff62431026e98cb0180ba39aef1bfc1701ecca3837ee5813110b8b42bbbe0436eee206284362ed02990997dce727fb1908ad2b4b26ad21aacb4d53b281cd0db4950b7a780d151156f4350", 0x4f2}], 0x4}, 0x0) 10:51:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000100), &(0x7f0000000280)=0x8) 10:51:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000180), 0xc) 10:51:57 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) 10:51:57 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) sendmsg$inet_sctp(r2, &(0x7f0000001280)={&(0x7f0000000140)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x6900}}], 0x1c}, 0x0) 10:51:57 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c}, 0x1c) 10:51:57 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 10:51:57 executing program 1: syz_emit_ethernet(0x62, &(0x7f0000000040)={@random="2589feae9678", @broadcast, @val, {@ipv4}}, 0x0) 10:51:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f00000000c0)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2c0000008400000002"], 0x2c}, 0x0) 10:51:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000300), &(0x7f00000003c0)=0x90) 10:51:57 executing program 0: r0 = socket(0x1c, 0x10000001, 0x84) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000080)='}', 0x1}], 0x1, &(0x7f0000000440)=[{0xc}, {0x14, 0x84, 0x1, "73190b23d3e9f6"}, {0xc}], 0x2c}, 0x0) 10:51:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000000)=0xf0, 0x4) 10:51:58 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) r1 = dup(r0) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000240)="c7e6c8554829b6f430af4b7bdb98fadf2056c9a8b6310cf4e976eaf0962d17a975498b2b17eb152a85cb897ec78211a318d695ab4cb3a004cd7d", 0x3a}, {&(0x7f00000002c0)="0a19ff772e34a4453a79a0724335d11796f9e968e1e8433cd06ba5959f1b6cff60f28ac52345d3da1e9e56f50bfe569851fc92", 0x33}, {&(0x7f0000000380)="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", 0x540}], 0x3}, 0x0) 10:51:58 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000200)="98", 0x1}], 0x1, &(0x7f0000000440)=[@prinfo={0x14, 0x84, 0x7, {0x1}}], 0x14}, 0x0) 10:51:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) connect(r2, &(0x7f0000000440)=@in={0x10, 0x2}, 0x10) 10:51:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000580)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) dup2(r0, r1) sendmsg$inet_sctp(r1, &(0x7f0000000500)={&(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000200)="98", 0x1}], 0x1, &(0x7f0000000440)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x200}}], 0x1c}, 0x0) 10:51:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendto$inet(r0, &(0x7f0000000180)='Y', 0x1, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 10:51:58 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000180)={0x0, @in, 0x0, 0x0, 0x319}, 0x98) 10:51:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0x112}, 0x98) 10:51:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x7, 0x0, 0x0, 0x0, 0x3f}, 0x98) 10:51:58 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 10:51:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f00000007c0), 0x10) 10:51:58 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) listen(r1, 0x0) 10:51:58 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0x1c, 0x1c}, 0x1c) 10:51:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0x294}, 0x98) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 10:51:58 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000180)={0x0, @in, 0x0, 0x0, 0x9}, 0x98) 10:51:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140), &(0x7f0000000200)=0x98) 10:51:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)=0x8) 10:51:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4040) 10:51:58 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0/file0\x00'}, 0x10) 10:51:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000090000000000000805000000093117c3c13c30826100000000000000000e050000000000004a0046dd"], &(0x7f0000000600)=""/188, 0x47, 0xbc, 0x1}, 0x20) 10:51:58 executing program 5: socketpair(0x28, 0x0, 0x28, &(0x7f00000002c0)) 10:51:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000090000000000000805000000093117c3c13c30826100000000000000000e050000000000004a0046dd40caed2e3030"], &(0x7f0000000600)=""/188, 0x47, 0xbc, 0x1}, 0x20) 10:51:58 executing program 4: syz_clone(0xc4824000, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000180)) 10:51:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000300)) 10:51:58 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000080)="45007df27ff165cf54f2fb74d7b970cbe6c3326c5405791c769541f46bd206b09c79760fab1fcab864fc0885fcf9853c0b9073de8db05ab370044fe88465094a6b03907be24e57fbc698597027cec3889accab57c98e7c58fdb8bedf7994c7a42b744dab56158446e31a07477ffe51d0387a0c395e", 0x75}], 0x1, 0x0, 0xfffffffffffffe2c}, 0x0) 10:51:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x9, 0x8, 0x0, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:58 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) 10:51:58 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002880)="45007df27ff165cf54f2fb74d7b970cbe6c3326c5405791c769541f46bd206b09c79760fab1fcab864fc08634789d73c0b9073dea9b05ab370044fe88465094a6b03907be24e57fbc698597027cec3887bda49b1c0704d00e3e26ff6eec23ea6799fa89d7031a52f5f84fd4262e85b8f97777b326baeef0f31f84c10179739c23caee4ec", 0x84}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000002840)={&(0x7f0000000600)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002780)=[{0x0}, {&(0x7f0000000700)=""/52, 0x34}, {&(0x7f0000000740)=""/36, 0x24}], 0x3}, 0x0) 10:51:58 executing program 2: socketpair(0x2b, 0x0, 0x0, &(0x7f0000000440)) 10:51:58 executing program 0: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x18, 0x2}, 0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) 10:51:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@abs={0x8}, 0x8, &(0x7f0000001600)=[{&(0x7f0000000380)="d437ae9a7d41e56a28518fb9699fb2d554c0fbcdf2219445c427bebbc9c44da39338df8f00fc4377c214b7900e55998b299eb56e5019560be5f69e3342be6521f3fe7988a7e0a82e21f4633396dea15b5e58075cc7747f9e17c1c9c5a7546f5ed6fe3407e855227c14ddc4d287a0681e970877815af2c8441d75da63a820bc82757e3bf9279a59ada7c1b810b5549fa1778078c797f4c2", 0x97}, {&(0x7f0000000200)="6b85767dd11a419f6befb4bc90e2e6cb82e39d24b71198ee1e7c698daf2e7c11d5253b180473b077943b023b067d56643d2a3078232b0499", 0x38}, {&(0x7f0000000500)="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", 0xf22}], 0x3}, 0x0) 10:51:59 executing program 1: socketpair(0x28, 0x0, 0x9, &(0x7f0000000040)) 10:51:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000040)) 10:51:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[{0xa8, 0x1, 0x0, "9420fe80d7595b52f2b3b8c4a1b21ccffebc87ec12ddd2c8575aa2318625f9ef206d14739bd5a561cfa136c4dee17e0ff7b6db7251076d8ba07c0d645346c50c2af094a27d6c2a41fbcd9525d5a3ef2eccb91a39ba89ff0d4002bfed27464628aba4cd1e9b473a9925f6235074e2006f720e3238f2662fed96649c569a8caf7a251f486de5891dab1fe22f59828c234d7e"}, {0x80, 0x0, 0x0, "b13aa2f23fa55e777c16b99aeb44e1cbc7261e0a6d20197a2c7f8e3ec36750677222b3e60e1d0303e25b7594bcf18b61b7b4f044e8bb84dc97ae2b83d45faac0a0617be667080261a73ed2faafe686d38e1d1e9b44423679f3398dabc3fa4ff5e8d760af67ce54b187"}, {0x48, 0x0, 0x0, "5b26cc4d34b7d52cf652f3cdf17fb7ab19cf6cf7cd061001cc59c7cd2efe0db0ebc74dbbc3e084190272831c5cafc59cdd"}, {0xa0, 0x0, 0x0, "da37166098df13d9ef68a80a03deec664ab8dc98ecf919dfd95b19a996e242ce9d041752cf15f6ae21882b3d8a04ebe616e245f27d700e0a04051bf6cc39bc2e758dc65c13d20392260000000000000000000000000000408d51f48c929ad8a7b7873107a79b06a139df4800720eb836760ddd5b9c2b248d7b07304dff690cdb0e8da97d6f24d1eeff"}], 0x210}, 0x0) 10:51:59 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbe, 0x41, 0x73, 0x40, 0x413c, 0x4001, 0x143e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x3, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x42, 0x0, 0x0, 0x91, 0x36, 0x47}}, {{0x9, 0x4, 0x0, 0x2, 0x1, 0xde, 0x4f, 0x11, 0x0, [], [{}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x61, 0xca, 0x1a}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x250, 0x3f}, 0x0, 0x0}) 10:51:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x2042) 10:51:59 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0}) 10:51:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000200)="6b85767dd11a419f6befb4bc90e2e6cb82e39d24b71198ee1e7c698daf2e7c11d5253b180473b077943b023b067d56643d2a3078232b0499", 0x38}, {&(0x7f0000000500)="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", 0xfb9}], 0x2}, 0x0) 10:51:59 executing program 3: r0 = open(&(0x7f0000001280)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 10:51:59 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xa, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000ffff000001000000", @ANYRES32, @ANYBLOB="10"], 0x20}, 0x0) 10:51:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="2532e819c724e9ae59e6d0ebe89d2e549603d8f8d87be7ad57841d42cee94ef676164560f5a284f80002000000000000dfc5ad7a0b8014888a5400f093c8bf2a34065925f16de67492f837697d8f138a8bfd51cbdd0673f3c00c9b10725cf3fd76f570d4c420f8098f552b6050bc67418811f777174be2c100256e0181810e2f73cef96929dd510ff6ce09a467edefc372", 0x91}], 0x1}, 0x0) sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 10:51:59 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, 0x0) 10:51:59 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x10, 0x0, &(0x7f0000000200)=[@clear_death], 0x0, 0x0, 0x0}) 10:51:59 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 10:51:59 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) 10:51:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000240)={0x0, &(0x7f0000000200)=[{}], 0x8, 0x0, '\x00', 0x0, 0x1}) [ 339.276758][ T20] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 339.375790][ T141] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 339.555346][ T20] usb 6-1: Using ep0 maxpacket: 8 [ 339.745418][ T20] usb 6-1: unable to get BOS descriptor or descriptor too short [ 339.745465][ T141] usb 5-1: config 0 has an invalid interface number: 66 but max is 2 [ 339.772825][ T141] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 339.793724][ T141] usb 5-1: config 0 has no interface number 1 [ 339.807015][ T141] usb 5-1: config 0 interface 0 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 339.825446][ T141] usb 5-1: config 0 interface 0 has no altsetting 1 [ 339.825439][ T20] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 340.005497][ T141] usb 5-1: New USB device found, idVendor=413c, idProduct=4001, bcdDevice=14.3e [ 340.015798][ T20] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 340.019374][ T141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.024857][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.024886][ T20] usb 6-1: Product: syz [ 340.024908][ T20] usb 6-1: Manufacturer: syz [ 340.048019][ T141] usb 5-1: Product: syz [ 340.059378][ T141] usb 5-1: Manufacturer: syz [ 340.068830][ T141] usb 5-1: SerialNumber: syz [ 340.075496][ T20] usb 6-1: SerialNumber: syz [ 340.096485][ T141] usb 5-1: config 0 descriptor?? [ 340.342755][ T141] usb 5-1: USB disconnect, device number 10 [ 340.361202][ T3672] usb 6-1: USB disconnect, device number 23 10:52:01 executing program 4: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) fcntl$getown(r0, 0x5) 10:52:01 executing program 3: r0 = mq_open(&(0x7f0000000180)='netdevsim', 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000040)=""/64, 0x40, 0x0, &(0x7f0000000080)={0x0, 0x989680}) 10:52:01 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) 10:52:01 executing program 1: r0 = socket$inet6(0x18, 0x2, 0x0) getsockname$inet6(r0, 0x0, &(0x7f00000000c0)) 10:52:01 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f00000001c0)) 10:52:01 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 10:52:01 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)}) 10:52:01 executing program 3: syz_clone(0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="03ce1e870f353cc55cf351b272a9a78aa0f4758a07ee76b65ef7d37acc16b71f791886816b856fb3a3c6a3335673663878df8dd65287799429f1484afa4e22134a8883c3e0ced2c03ae85b132d053654f5b016f195b7ca120ad2039da51d7f7285cad4e2a3a7518c22") sched_rr_get_interval(0x0, &(0x7f0000000580)) 10:52:01 executing program 2: syz_clone(0xc007000, 0x0, 0x0, 0x0, 0x0, 0x0) 10:52:01 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/nbd2', 0x0, 0x0) 10:52:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004800), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x321, 0x0, 0x0, {{0x5}, {@val={0x4, 0x116}, @val={0x8}, @void}}}, 0x24}}, 0x0) 10:52:01 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0505350, &(0x7f0000000180)={{}, 'port1\x00'}) tkill(0x0, 0x0) 10:52:01 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, 0x0}, 0x0) [ 341.056096][T12599] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 10:52:01 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x11, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 10:52:01 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:01 executing program 1: r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, 0x0, 0x0) 10:52:01 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, 0x0, 0x0) 10:52:01 executing program 4: ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) creat(&(0x7f0000000100)='./file0\x00', 0xd5) 10:52:01 executing program 5: openat$sysfs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) 10:52:01 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18}, 0x18}}, 0x0) [ 341.209368][T12611] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 341.247612][T12611] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 10:52:01 executing program 4: openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) 10:52:01 executing program 5: openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$dsp(r0, &(0x7f0000000100)="e12accf7421cacf1a66aca98b7", 0xd) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)) 10:52:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000000002000090001"], 0xc0}}, 0x0) [ 341.279876][T12611] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 10:52:01 executing program 3: mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0xffffffe3) read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) 10:52:01 executing program 0: open(&(0x7f00000001c0)='./bus\x00', 0x163042, 0x0) r0 = syz_io_uring_setup(0x4a3a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x5) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x3, 0x0, 0x0) [ 341.325041][T12611] netlink: 'syz-executor.2': attribute type 13 has an invalid length. 10:52:01 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x111101, 0x0) 10:52:01 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:01 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000180)={0x80000001, 0x1, &(0x7f0000000040)=[0x0], &(0x7f00000000c0), &(0x7f0000000100), 0x0}) 10:52:01 executing program 4: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200), 0x8) [ 341.540190][T12636] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 10:52:01 executing program 1: r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f00000005c0), 0x6) [ 341.597932][T12636] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 10:52:01 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0) [ 341.639559][T12636] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 341.698698][T12636] netlink: 'syz-executor.2': attribute type 13 has an invalid length. 10:52:02 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f0000001400)='./file1\x00', 0x0) 10:52:02 executing program 4: r0 = syz_io_uring_setup(0x4a3a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x3, 0x0, 0x0) 10:52:02 executing program 5: r0 = epoll_create1(0x0) r1 = inotify_init1(0x0) r2 = syz_clone3(&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$setown(r1, 0x8, r2) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) r4 = pidfd_open(r3, 0x0) r5 = epoll_create1(0x0) r6 = dup3(r4, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000000)) 10:52:02 executing program 0: open(&(0x7f00000001c0)='./bus\x00', 0x163042, 0x0) r0 = syz_io_uring_setup(0x4a3a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x5) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x3, 0x0, 0x0) 10:52:02 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={0x0}}, 0x0) 10:52:02 executing program 1: open(0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_io_uring_setup(0x4a3a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x5) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:52:02 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:02 executing program 4: ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) creat(&(0x7f0000000100)='./file0\x00', 0xd5) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:52:02 executing program 5: bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) [ 342.242841][T12654] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 10:52:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0) 10:52:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x5452, &(0x7f00000000c0)={0x0, 0x0, 0x0, {}, {}, @ramp}) [ 342.293333][T12654] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 10:52:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000014c0)=""/58) 10:52:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000015c0)=""/4096) 10:52:02 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f00000001c0)=@string={0x2}}]}) 10:52:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSFF(r0, 0xc0045878, 0x0) 10:52:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000013c0)=""/214) 10:52:02 executing program 0: syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x3f, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x56d}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x0, 0x9}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x70, 0x0, 0x44, 0x20}, 0x0, 0x0, 0x6, [{0x3, &(0x7f00000000c0)=@string={0x3, 0x3, "87"}}, {0x0, 0x0}, {0x2, &(0x7f00000004c0)=@string={0x2}}, {0x0, 0x0}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2801}}, {0x2, &(0x7f0000000640)=@string={0x2}}]}) syz_open_dev$evdev(&(0x7f00000003c0), 0x0, 0x0) 10:52:02 executing program 1: open(0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_io_uring_setup(0x4a3a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x5) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:52:02 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:02 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x200}}]}}}]}}]}}, 0x0) 10:52:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001080)={0x0, 0x0, 0x0}) 10:52:03 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0xe303, 0x0) 10:52:03 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x6e}}}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f00000000c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 342.835815][ T34] usb 5-1: new high-speed USB device number 11 using dummy_hcd 10:52:03 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0xe303, 0x0) [ 342.895462][ T20] usb 1-1: new high-speed USB device number 12 using dummy_hcd 10:52:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000001080)={0x0, 0x0, 0x0}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000013c0)=""/214) [ 342.955701][T12305] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 343.115760][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 343.135384][ T3678] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 343.275713][ T34] usb 5-1: language id specifier not provided by device, defaulting to English [ 343.325370][T12305] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 343.395536][ T20] usb 1-1: unable to get BOS descriptor or descriptor too short [ 343.437140][ T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 343.450850][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.469374][ T34] usb 5-1: Product: syz [ 343.479659][ T34] usb 5-1: Manufacturer: syz [ 343.490094][ T34] usb 5-1: SerialNumber: syz [ 343.495588][ T20] usb 1-1: config 1 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 343.506243][ T3678] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 343.520110][T12305] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 343.525490][ T20] usb 1-1: config 1 interface 0 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 343.542196][T12305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.565354][T12305] usb 4-1: Product: syz [ 343.569557][T12305] usb 4-1: Manufacturer: syz [ 343.571150][ T20] usb 1-1: config 1 interface 0 has no altsetting 0 [ 343.574151][T12305] usb 4-1: SerialNumber: syz [ 343.595526][ T3678] usb 6-1: language id specifier not provided by device, defaulting to English [ 343.627846][T12305] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 343.645790][ T20] usb 1-1: language id specifier not provided by device, defaulting to English [ 343.816708][ T3664] usb 5-1: USB disconnect, device number 11 [ 343.846086][T12305] usb 4-1: USB disconnect, device number 7 [ 344.255489][ T20] usb 1-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 344.264877][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:52:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x40) 10:52:04 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0xe303, 0x0) 10:52:04 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000001c0), 0x0) [ 344.315525][ T3678] usb 6-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 344.324576][ T3678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.418011][ T3678] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 344.620181][ T3664] usb 6-1: USB disconnect, device number 24 [ 344.685415][ T20] usbhid 1-1:1.0: can't add hid device: -71 [ 344.691391][ T20] usbhid: probe of 1-1:1.0 failed with error -71 [ 344.700387][ T20] usb 1-1: USB disconnect, device number 12 10:52:05 executing program 0: syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x600000) 10:52:05 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x0) 10:52:05 executing program 2: r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:05 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, 0x0, 0x0) 10:52:05 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 10:52:05 executing program 2: r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:05 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') 10:52:05 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x800}, 0x14) 10:52:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendto(r0, &(0x7f0000000000)="7ae5305bb136b8cbe8ba0212adaf60bf4c5ff890cfb1ef9668ba79aa911f7dfabbf5efc8313b12bd0075b09535eceb1e34ae4fab29057b86820db1abd8910121ebcfae6ce907b55aa918ec756a2faf7093a7675b943f39a1e6cbe5a0c5fd58a479c127", 0x63, 0x4000010, &(0x7f0000000100)=@phonet={0x23, 0x0, 0xb1, 0x1}, 0x80) 10:52:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f00000001c0)="53000010000010000000000d000000548fa6336f0100010000000000000000ff9a177f7b3f1e6e0b19c9", 0x2a}], 0x2) 10:52:05 executing program 2: r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:05 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000340)) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffe000/0x1000)=nil) 10:52:05 executing program 4: memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r0, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:52:05 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r0, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:52:05 executing program 0: memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r0, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:52:05 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 345.365770][ T34] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 345.755783][ T34] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 345.764110][ T34] usb 2-1: config 0 has no interface number 0 [ 345.770381][ T34] usb 2-1: config 0 interface 105 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 345.782484][ T34] usb 2-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 345.791698][ T34] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.801598][ T34] usb 2-1: config 0 descriptor?? [ 345.850967][ T34] snd-usb-audio: probe of 2-1:0.105 failed with error -2 [ 346.052876][T12305] usb 2-1: USB disconnect, device number 19 10:52:06 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 10:52:06 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000850600a63fd1b57d11711a000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0x2, r3}]}, 0x4c}}, 0x0) 10:52:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000850600a63fd1b57d11711a000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0x2, r3}]}, 0x4c}}, 0x0) 10:52:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000850600a63fd1b57d11711a000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0x2, r3}]}, 0x4c}}, 0x0) 10:52:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000850600a63fd1b57d11711a000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0x2, r3}]}, 0x4c}}, 0x0) [ 346.598243][T12744] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:52:06 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 346.643077][T12744] 8021q: adding VLAN 0 to HW filter on device bond4 [ 346.664756][T12739] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 346.680069][T12739] bond72 (uninitialized): Released all slaves 10:52:06 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 346.697621][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 10:52:07 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 346.760016][T12746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.780597][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:52:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:07 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (fail_nth: 1) [ 346.838186][T12743] 8021q: adding VLAN 0 to HW filter on device bond1 10:52:07 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 346.885582][T12305] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 346.937343][T12765] FAULT_INJECTION: forcing a failure. [ 346.937343][T12765] name failslab, interval 1, probability 0, space 0, times 1 [ 346.959882][T12765] CPU: 1 PID: 12765 Comm: syz-executor.3 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 346.970414][T12765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.980483][T12765] Call Trace: [ 346.983769][T12765] [ 346.986705][T12765] dump_stack_lvl+0xcd/0x134 [ 346.991426][T12765] should_fail.cold+0x5/0xa [ 346.995946][T12765] ? kvmalloc_node+0x3e/0x100 [ 347.000688][T12765] should_failslab+0x5/0x10 [ 347.004146][T12767] input: syz1 as /devices/virtual/input/input89 [ 347.005236][T12765] __kmalloc_node+0x75/0x4a0 [ 347.005366][T12765] kvmalloc_node+0x3e/0x100 [ 347.005400][T12765] seq_read_iter+0x7f7/0x1280 [ 347.005453][T12765] ? aa_path_link+0x2f0/0x2f0 [ 347.005517][T12765] seq_read+0x3e8/0x5c0 [ 347.005544][T12765] ? seq_read_iter+0x1280/0x1280 [ 347.039248][T12765] ? lock_downgrade+0x6e0/0x6e0 [ 347.044145][T12765] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 347.050466][T12765] ? security_file_permission+0xab/0xd0 [ 347.056078][T12765] ? seq_read_iter+0x1280/0x1280 [ 347.061034][T12765] vfs_read+0x1b5/0x600 [ 347.065267][T12765] __x64_sys_pread64+0x1fd/0x250 [ 347.070221][T12765] ? ksys_pread64+0x1a0/0x1a0 [ 347.074924][T12765] ? syscall_enter_from_user_mode+0x21/0x70 [ 347.080898][T12765] do_syscall_64+0x35/0xb0 [ 347.085344][T12765] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 347.091298][T12765] RIP: 0033:0x7f3b5e01c059 [ 347.095728][T12765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 347.115436][T12765] RSP: 002b:00007f3b5c991168 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 347.123862][T12765] RAX: ffffffffffffffda RBX: 00007f3b5e12ef60 RCX: 00007f3b5e01c059 [ 347.131844][T12765] RDX: 0000000000018ffd RSI: 00000000200191c0 RDI: 0000000000000004 [ 347.139824][T12765] RBP: 00007f3b5c9911d0 R08: 0000000000000000 R09: 0000000000000000 [ 347.147805][T12765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.155784][T12765] R13: 00007f3b5e662b1f R14: 00007f3b5c991300 R15: 0000000000022000 [ 347.163784][T12765] [ 347.255640][T12305] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 347.263838][T12305] usb 2-1: config 0 has no interface number 0 [ 347.270724][T12305] usb 2-1: config 0 interface 105 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 347.281343][T12305] usb 2-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 347.291182][T12305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.301438][T12305] usb 2-1: config 0 descriptor?? [ 347.347448][T12305] snd-usb-audio: probe of 2-1:0.105 failed with error -2 [ 347.563914][T12305] usb 2-1: USB disconnect, device number 20 10:52:08 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 10:52:08 executing program 0: r0 = gettid() syz_clone(0xe0984000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="658b615808e498262ece5b645588dc5c9f091d661972305cb260c7d8250015d7c2dcc579010e73fa71d7748ca442c35f723fec4e67a4cefa3c5a13b7469adf90fce323022d2234308393b570710de43033f4c5872791df3fdfffa103687544caa39e53a21922988787ce861ea5008e9318d53716876f746d1d73a29843406c637b882b5d6b3c81524ba16dff8979e782d5348e670a177acbc43d3269") prlimit64(r0, 0x6, &(0x7f0000000280)={0x7, 0x8000}, 0x0) ptrace(0x10, 0x0) wait4(r0, &(0x7f0000000000), 0x2, &(0x7f00000001c0)) ptrace(0x8, 0x0) gettid() r1 = socket$caif_seqpacket(0x25, 0x5, 0x5) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}, 0xc) timer_create(0x7, 0x0, 0x0) 10:52:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 1) 10:52:08 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:08 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (fail_nth: 2) 10:52:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 348.113327][T12774] input: syz1 as /devices/virtual/input/input90 [ 348.134315][T12778] input: syz1 as /devices/virtual/input/input91 [ 348.156904][T12774] FAULT_INJECTION: forcing a failure. 10:52:08 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 348.156904][T12774] name failslab, interval 1, probability 0, space 0, times 0 [ 348.157599][T12781] FAULT_INJECTION: forcing a failure. [ 348.157599][T12781] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 348.215435][T12781] CPU: 1 PID: 12781 Comm: syz-executor.3 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 348.225976][T12781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.236077][T12781] Call Trace: [ 348.239365][T12781] [ 348.242305][T12781] dump_stack_lvl+0xcd/0x134 [ 348.246922][T12781] should_fail.cold+0x5/0xa [ 348.251450][T12781] prepare_alloc_pages+0x17b/0x570 [ 348.256667][T12781] __alloc_pages+0x12f/0x500 10:52:08 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 348.261276][T12781] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 348.268074][T12781] ? __slab_alloc.constprop.0+0x4d/0xa0 [ 348.273653][T12781] alloc_pages+0x1aa/0x310 [ 348.278090][T12781] ? mark_held_locks+0x9f/0xe0 [ 348.282885][T12781] allocate_slab+0x27f/0x3c0 [ 348.287501][T12781] ___slab_alloc+0xbe1/0x12b0 [ 348.292202][T12781] ? kvmalloc_node+0x3e/0x100 [ 348.296911][T12781] ? refill_obj_stock+0x211/0x4a0 [ 348.302042][T12781] ? kvmalloc_node+0x3e/0x100 [ 348.306739][T12781] __slab_alloc.constprop.0+0x4d/0xa0 10:52:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 348.312141][T12781] ? kvmalloc_node+0x3e/0x100 [ 348.316833][T12781] __kmalloc_node+0x339/0x4a0 [ 348.321535][T12781] kvmalloc_node+0x3e/0x100 [ 348.326063][T12781] seq_read_iter+0x7f7/0x1280 [ 348.330769][T12781] ? aa_path_link+0x2f0/0x2f0 [ 348.335470][T12781] seq_read+0x3e8/0x5c0 [ 348.339649][T12781] ? seq_read_iter+0x1280/0x1280 [ 348.344609][T12781] ? lock_downgrade+0x6e0/0x6e0 [ 348.349488][T12781] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 348.355764][T12781] ? security_file_permission+0xab/0xd0 [ 348.361335][T12781] ? seq_read_iter+0x1280/0x1280 10:52:08 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 348.366294][T12781] vfs_read+0x1b5/0x600 [ 348.370475][T12781] __x64_sys_pread64+0x1fd/0x250 [ 348.375436][T12781] ? ksys_pread64+0x1a0/0x1a0 [ 348.380139][T12781] ? syscall_enter_from_user_mode+0x21/0x70 [ 348.386066][T12781] do_syscall_64+0x35/0xb0 [ 348.390513][T12781] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 348.395570][T12791] input: syz1 as /devices/virtual/input/input92 [ 348.396419][T12781] RIP: 0033:0x7f3b5e01c059 [ 348.396462][T12781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 348.426716][T12781] RSP: 002b:00007f3b5c991168 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 348.435145][T12781] RAX: ffffffffffffffda RBX: 00007f3b5e12ef60 RCX: 00007f3b5e01c059 [ 348.443132][T12781] RDX: 0000000000018ffd RSI: 00000000200191c0 RDI: 0000000000000004 [ 348.451110][T12781] RBP: 00007f3b5c9911d0 R08: 0000000000000000 R09: 0000000000000000 [ 348.459097][T12781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.467075][T12781] R13: 00007f3b5e662b1f R14: 00007f3b5c991300 R15: 0000000000022000 [ 348.475070][T12781] [ 348.498740][T12793] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 348.501451][T12774] CPU: 0 PID: 12774 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 348.518630][T12774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.528698][T12774] Call Trace: [ 348.531984][T12774] [ 348.534926][T12774] dump_stack_lvl+0xcd/0x134 [ 348.539543][T12774] should_fail.cold+0x5/0xa [ 348.544068][T12774] ? tomoyo_realpath_from_path+0xc3/0x620 [ 348.549868][T12774] should_failslab+0x5/0x10 [ 348.554390][T12774] __kmalloc+0x72/0x450 [ 348.558569][T12774] tomoyo_realpath_from_path+0xc3/0x620 [ 348.564139][T12774] ? tomoyo_profile+0x42/0x50 [ 348.568842][T12774] tomoyo_path_number_perm+0x1d5/0x590 [ 348.574315][T12774] ? tomoyo_path_number_perm+0x18d/0x590 [ 348.579971][T12774] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 348.583028][T12796] FAULT_INJECTION: forcing a failure. [ 348.583028][T12796] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 348.585790][T12774] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 348.585859][T12774] ? __context_tracking_exit+0xb8/0xe0 [ 348.610520][T12774] ? __fget_files+0x28c/0x470 [ 348.615267][T12774] security_file_ioctl+0x50/0xb0 [ 348.620245][T12774] __x64_sys_ioctl+0xb3/0x200 [ 348.624931][T12774] do_syscall_64+0x35/0xb0 [ 348.629362][T12774] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 348.635260][T12774] RIP: 0033:0x7f55d6342059 [ 348.639682][T12774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 348.659318][T12774] RSP: 002b:00007f55d4cb7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.667738][T12774] RAX: ffffffffffffffda RBX: 00007f55d6454f60 RCX: 00007f55d6342059 [ 348.675709][T12774] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 348.683678][T12774] RBP: 00007f55d4cb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 348.691646][T12774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.699616][T12774] R13: 00007f55d6988b1f R14: 00007f55d4cb7300 R15: 0000000000022000 [ 348.707607][T12774] [ 348.710623][T12796] CPU: 1 PID: 12796 Comm: syz-executor.3 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 348.721136][T12796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.731191][T12796] Call Trace: [ 348.734467][T12796] [ 348.737396][T12796] dump_stack_lvl+0xcd/0x134 [ 348.742000][T12796] should_fail.cold+0x5/0xa [ 348.746507][T12796] _copy_to_user+0x2c/0x150 [ 348.751074][T12796] simple_read_from_buffer+0xcc/0x160 [ 348.756486][T12796] proc_fail_nth_read+0x187/0x220 [ 348.761655][T12796] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 348.767395][T12796] ? security_file_permission+0xab/0xd0 [ 348.772966][T12796] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 348.778699][T12796] vfs_read+0x1b5/0x600 [ 348.782864][T12796] ksys_read+0x12d/0x250 [ 348.787107][T12796] ? vfs_write+0xae0/0xae0 [ 348.791527][T12796] ? syscall_enter_from_user_mode+0x21/0x70 [ 348.797439][T12796] do_syscall_64+0x35/0xb0 [ 348.801857][T12796] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 348.807750][T12796] RIP: 0033:0x7f3b5dfcec0c [ 348.812164][T12796] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 348.831781][T12796] RSP: 002b:00007f3b5c991160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.840196][T12796] RAX: ffffffffffffffda RBX: 00007f3b5e12ef60 RCX: 00007f3b5dfcec0c [ 348.848166][T12796] RDX: 000000000000000f RSI: 00007f3b5c9911e0 RDI: 0000000000000005 [ 348.856142][T12796] RBP: 00007f3b5c9911d0 R08: 0000000000000000 R09: 0000000000000000 10:52:08 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (fail_nth: 3) 10:52:09 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 348.864108][T12796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.872071][T12796] R13: 00007f3b5e662b1f R14: 00007f3b5c991300 R15: 0000000000022000 [ 348.880053][T12796] [ 348.888709][T12774] ERROR: Out of memory at tomoyo_realpath_from_path. [ 348.963736][T12798] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 348.985393][ T34] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 349.405436][ T34] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 349.413819][ T34] usb 2-1: config 0 has no interface number 0 [ 349.420207][ T34] usb 2-1: config 0 interface 105 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 349.430422][ T34] usb 2-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 349.439797][ T34] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.452045][ T34] usb 2-1: config 0 descriptor?? [ 349.499180][ T34] snd-usb-audio: probe of 2-1:0.105 failed with error -2 [ 349.738762][T12305] usb 2-1: USB disconnect, device number 21 10:52:10 executing program 0: r0 = gettid() (async) syz_clone(0xe0984000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="658b615808e498262ece5b645588dc5c9f091d661972305cb260c7d8250015d7c2dcc579010e73fa71d7748ca442c35f723fec4e67a4cefa3c5a13b7469adf90fce323022d2234308393b570710de43033f4c5872791df3fdfffa103687544caa39e53a21922988787ce861ea5008e9318d53716876f746d1d73a29843406c637b882b5d6b3c81524ba16dff8979e782d5348e670a177acbc43d3269") prlimit64(r0, 0x6, &(0x7f0000000280)={0x7, 0x8000}, 0x0) (async) ptrace(0x10, 0x0) (async) wait4(r0, &(0x7f0000000000), 0x2, &(0x7f00000001c0)) ptrace(0x8, 0x0) (async) gettid() (async) r1 = socket$caif_seqpacket(0x25, 0x5, 0x5) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}, 0xc) (async) timer_create(0x7, 0x0, 0x0) 10:52:10 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) 10:52:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:10 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:10 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) [ 350.296050][T12802] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 350.327175][T12809] input: syz1 as /devices/virtual/input/input94 10:52:10 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x281, 0x0) 10:52:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:10 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x2) 10:52:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:10 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x593, 0x0) [ 350.509745][T12822] input: syz1 as /devices/virtual/input/input96 [ 350.546902][T12820] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 350.605344][T12305] usb 2-1: new high-speed USB device number 22 using dummy_hcd 10:52:11 executing program 0: r0 = gettid() syz_clone(0xe0984000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="658b615808e498262ece5b645588dc5c9f091d661972305cb260c7d8250015d7c2dcc579010e73fa71d7748ca442c35f723fec4e67a4cefa3c5a13b7469adf90fce323022d2234308393b570710de43033f4c5872791df3fdfffa103687544caa39e53a21922988787ce861ea5008e9318d53716876f746d1d73a29843406c637b882b5d6b3c81524ba16dff8979e782d5348e670a177acbc43d3269") prlimit64(r0, 0x6, &(0x7f0000000280)={0x7, 0x8000}, 0x0) ptrace(0x10, 0x0) wait4(r0, &(0x7f0000000000), 0x2, &(0x7f00000001c0)) ptrace(0x8, 0x0) gettid() r1 = socket$caif_seqpacket(0x25, 0x5, 0x5) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}, 0xc) timer_create(0x7, 0x0, 0x0) gettid() (async) syz_clone(0xe0984000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="658b615808e498262ece5b645588dc5c9f091d661972305cb260c7d8250015d7c2dcc579010e73fa71d7748ca442c35f723fec4e67a4cefa3c5a13b7469adf90fce323022d2234308393b570710de43033f4c5872791df3fdfffa103687544caa39e53a21922988787ce861ea5008e9318d53716876f746d1d73a29843406c637b882b5d6b3c81524ba16dff8979e782d5348e670a177acbc43d3269") (async) prlimit64(r0, 0x6, &(0x7f0000000280)={0x7, 0x8000}, 0x0) (async) ptrace(0x10, 0x0) (async) wait4(r0, &(0x7f0000000000), 0x2, &(0x7f00000001c0)) (async) ptrace(0x8, 0x0) (async) gettid() (async) socket$caif_seqpacket(0x25, 0x5, 0x5) (async) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}, 0xc) (async) timer_create(0x7, 0x0, 0x0) (async) 10:52:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x10) 10:52:11 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:11 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x820, 0x0) [ 350.865584][T12832] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 350.885150][T12834] input: syz1 as /devices/virtual/input/input98 [ 350.965808][T12305] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 350.981936][T12305] usb 2-1: config 0 has no interface number 0 [ 351.016165][T12305] usb 2-1: config 0 interface 105 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 351.033270][T12305] usb 2-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 351.044303][T12305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.055127][T12305] usb 2-1: config 0 descriptor?? [ 351.102184][T12305] snd-usb-audio: probe of 2-1:0.105 failed with error -2 [ 351.331446][T12305] usb 2-1: USB disconnect, device number 22 10:52:12 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 10:52:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x541b) 10:52:12 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0xaa1, 0x0) 10:52:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:12 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 351.879366][T12849] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 351.886493][T12851] input: syz1 as /devices/virtual/input/input100 10:52:12 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0xd6e, 0x0) 10:52:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 352.195292][T12305] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 352.565435][T12305] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 352.573643][T12305] usb 2-1: config 0 has no interface number 0 [ 352.595334][T12305] usb 2-1: config 0 interface 105 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 352.615292][T12305] usb 2-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 352.624359][T12305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.647668][T12305] usb 2-1: config 0 descriptor?? [ 352.689445][T12305] snd-usb-audio: probe of 2-1:0.105 failed with error -2 [ 352.904337][T12305] usb 2-1: USB disconnect, device number 23 10:52:13 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x820, 0x0) 10:52:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5421) 10:52:13 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a4000000040012000800080000000000140006000000"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:13 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x200321bd, 0x0) 10:52:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:13 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 353.697462][T12861] input: syz1 as /devices/virtual/input/input103 [ 353.704295][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 10:52:14 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x2) [ 353.740693][T12867] input: syz1 as /devices/virtual/input/input104 [ 353.743792][T12868] validate_nla: 6 callbacks suppressed [ 353.743806][T12868] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 10:52:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:14 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x3) [ 353.811049][T12868] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 353.838227][T12868] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 10:52:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5450) 10:52:14 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x2) 10:52:14 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a4000000040012000800080000000000140006000000"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 353.923042][T12877] input: syz1 as /devices/virtual/input/input105 [ 353.955481][ T3678] usb 2-1: new high-speed USB device number 24 using dummy_hcd 10:52:14 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4) 10:52:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 354.007890][T12882] input: syz1 as /devices/virtual/input/input107 [ 354.038128][T12886] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 10:52:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5451) 10:52:14 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getneightbl={0x14, 0x42, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getchain={0x4c, 0x66, 0x8, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0xd, 0x1}, {0xa, 0x8}, {0xffe0}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x61e8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x48051) syz_emit_ethernet(0x46, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) [ 354.091670][T12891] input: syz1 as /devices/virtual/input/input108 [ 354.127204][T12886] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 354.177154][T12886] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 354.218453][T12894] input: syz1 as /devices/virtual/input/input109 [ 354.226663][T12886] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 354.315385][ T3678] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 354.323588][ T3678] usb 2-1: config 0 has no interface number 0 [ 354.365926][ T3678] usb 2-1: config 0 interface 105 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 354.385791][ T3678] usb 2-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 354.394946][ T3678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.414755][ T3678] usb 2-1: config 0 descriptor?? [ 354.457330][ T3678] snd-usb-audio: probe of 2-1:0.105 failed with error -2 [ 354.662283][ T3678] usb 2-1: USB disconnect, device number 24 10:52:15 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) 10:52:15 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x5) 10:52:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:15 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getneightbl={0x14, 0x42, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getchain={0x4c, 0x66, 0x8, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0xd, 0x1}, {0xa, 0x8}, {0xffe0}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x61e8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x48051) (async) syz_emit_ethernet(0x46, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 10:52:15 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a4000000040012000800080000000000140006000000"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5452) [ 355.198052][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 355.219677][T12903] input: syz1 as /devices/virtual/input/input110 [ 355.222045][T12906] input: syz1 as /devices/virtual/input/input111 10:52:15 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x6) 10:52:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5460) [ 355.265872][T12901] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 355.286589][T12901] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 355.302879][T12901] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 10:52:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:15 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getneightbl={0x14, 0x42, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getchain={0x4c, 0x66, 0x8, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0xd, 0x1}, {0xa, 0x8}, {0xffe0}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x61e8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x48051) (async) syz_emit_ethernet(0x46, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 10:52:15 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 355.374667][T12913] input: syz1 as /devices/virtual/input/input112 10:52:15 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x7) [ 355.444952][T12916] input: syz1 as /devices/virtual/input/input113 [ 355.494756][T12922] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 355.512916][T12922] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 355.535533][ T3672] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 355.560189][T12922] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 355.975498][ T3672] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 355.983690][ T3672] usb 2-1: config 0 has no interface number 0 [ 355.990695][ T3672] usb 2-1: config 0 interface 105 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 356.000809][ T3672] usb 2-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 356.010527][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.021841][ T3672] usb 2-1: config 0 descriptor?? [ 356.079321][ T3672] snd-usb-audio: probe of 2-1:0.105 failed with error -2 [ 356.278715][ T20] usb 2-1: USB disconnect, device number 25 10:52:17 executing program 1: 10:52:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5501) 10:52:17 executing program 0: socketpair(0x1e, 0x5, 0x8001, &(0x7f0000000000)={0xffffffffffffffff}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x40010, 0xffffffffffffffff, 0x8000000) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0xc85, 0x6, 0x0, {0x0, 0x0, r2}}, 0x3) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendmsg(r3, &(0x7f0000000a40)={0x0, 0xffffff88, &(0x7f0000000380)=[{&(0x7f00000003c0)="3a9a", 0x2d05}], 0x1, 0x0, 0x0, 0x2bc0}, 0x350c) 10:52:17 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x9) 10:52:17 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:17 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0xa) [ 356.826302][T12934] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 356.852685][T12931] input: syz1 as /devices/virtual/input/input115 [ 356.852744][T12926] input: syz1 as /devices/virtual/input/input114 10:52:17 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:17 executing program 1: 10:52:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:17 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x21) 10:52:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5504) 10:52:17 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9f"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:17 executing program 0: socketpair(0x1e, 0x5, 0x8001, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 32) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x40010, 0xffffffffffffffff, 0x8000000) (async, rerun: 32) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0xc85, 0x6, 0x0, {0x0, 0x0, r2}}, 0x3) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) (async) socket$inet6_sctp(0xa, 0x0, 0x84) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg(r3, &(0x7f0000000a40)={0x0, 0xffffff88, &(0x7f0000000380)=[{&(0x7f00000003c0)="3a9a", 0x2d05}], 0x1, 0x0, 0x0, 0x2bc0}, 0x350c) (rerun: 32) 10:52:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:17 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x48) 10:52:17 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9f"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 357.170065][T12955] input: syz1 as /devices/virtual/input/input117 10:52:17 executing program 1: 10:52:17 executing program 1: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 10:52:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5507) 10:52:17 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c) 10:52:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:17 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9f"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:17 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x68) 10:52:17 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 357.439353][T12977] input: syz1 as /devices/virtual/input/input120 10:52:18 executing program 0: socketpair(0x1e, 0x5, 0x8001, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 32) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x40010, 0xffffffffffffffff, 0x8000000) (async, rerun: 32) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) (rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0xc85, 0x6, 0x0, {0x0, 0x0, r2}}, 0x3) (async, rerun: 32) r3 = socket$inet6(0xa, 0x3, 0x3c) (rerun: 32) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) (async) socket$inet6_sctp(0xa, 0x0, 0x84) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) (rerun: 32) sendmsg(r3, &(0x7f0000000a40)={0x0, 0xffffff88, &(0x7f0000000380)=[{&(0x7f00000003c0)="3a9a", 0x2d05}], 0x1, 0x0, 0x0, 0x2bc0}, 0x350c) 10:52:18 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5508) 10:52:18 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 10:52:18 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x6c) [ 357.894920][T12987] input: syz1 as /devices/virtual/input/input121 10:52:18 executing program 1: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 10:52:18 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:18 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x74) 10:52:18 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 10:52:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x550f) 10:52:18 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 358.008615][T12998] input: syz1 as /devices/virtual/input/input122 10:52:18 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x7a) 10:52:19 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x7a) 10:52:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5510) 10:52:19 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:19 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x300) 10:52:19 executing program 1: syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 358.854024][T13037] validate_nla: 29 callbacks suppressed [ 358.854043][T13037] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 358.878243][T13042] input: syz1 as /devices/virtual/input/input123 10:52:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:19 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x500) 10:52:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5513) 10:52:19 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x300) [ 358.930929][T13037] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 358.963767][T13037] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 10:52:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 358.997633][T13037] netlink: 'syz-executor.2': attribute type 13 has an invalid length. 10:52:19 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:19 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x600) 10:52:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 359.073121][T13055] input: syz1 as /devices/virtual/input/input124 10:52:19 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x8933) [ 359.139386][T13058] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 359.155739][T13058] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 359.178241][T13058] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 10:52:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 359.205984][T13058] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 359.241140][T13064] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 359.251937][T13067] input: syz1 as /devices/virtual/input/input126 [ 359.309397][T13064] netlink: 'syz-executor.0': attribute type 8 has an invalid length. 10:52:19 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x0, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) 10:52:19 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x700) 10:52:19 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0xff02) 10:52:19 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x4b3, 0x3108, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x8241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x20, 0x10, 0x9d, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x8000, 0x1, 0x1, {0x22, 0x856}}, {{{0x9, 0x5, 0x81, 0x3, 0x3f7, 0x58, 0x1, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x20}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x0, 0x55, 0xff, 0x8, 0x20}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x1, 0x7ff}, @ptm_cap={0x3}]}, 0x1, [{0xa7, &(0x7f0000000100)=@string={0xa7, 0x3, "705ec7978194e6b8e6aa8df1b69c711bff8cd81c6f50aa80281c820e4de6337e87a02ec62253fe3747a120f24f508c6575ba76b1959c29584cccfd14dd62b933a279a020b87ec107db7f269f3958a5612b598261a09d1b59c3fc1c292a886a3e7c55dee8dd896a838482fc515dd00e00a316fc625bf7e2024bf4ebbcf2d0aa2c3f037c29e0a14951851389c2414d2278e9c25430505f37b583bce9082f9e4e3c34caf4619c"}}]}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a40)={0x0, 0x0, 0x1, "f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x2801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x70, 0x40, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x5, 0xdf, 0x1, {0x22, 0xc38}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x4b, 0xa1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x2, 0x81, 0xc8}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x10, 0x6, 0x0, 0x40, 0x20, 0x81}, 0xd7, &(0x7f0000000340)={0x5, 0xf, 0xd7, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1f, 0x81, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xfb, 0xc7, 0xfed3, 0x1}, @generic={0x8c, 0x10, 0x4, "655a85f7651e4d0b25c6d5c17b8556a3bb58dfcc5dbdceef1965e216f3927a9c375de78627e632bd43bf4f5b94d39f493ca7062781b76062a79a3b1e4a1d4fb50c7adfcb6bc01af9dfdc682b7f59383a98d0fe0b49be41f17fe98d2566c97aa4b408e512f3ab55563b79b704831bbfb9691e7fc0bb8ed7fe8003d224098d961b505b1793458810f0fb"}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "3b1a3042bc5387579e14062fc8af7544"}, @generic={0x1d, 0x10, 0xb, "ea05922a47d0027b2d08231b4dbe1acd82cd9460ec4d55f03e18"}]}, 0x4, [{0xa, &(0x7f0000000440)=@string={0xa, 0x3, "d381362ab3ec0f8b"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x21, 0x30, {0x30, 0x4, "f1b0524daebfeb018832b2d21d1af9ff9d43005c767336838d4360aacaba8bbe21ef1f6d7c8f82195cf19ac042e5"}}, &(0x7f0000000600)={0x0, 0x3, 0x2f, @string={0x2f, 0x3, "5f0449188bda0ddb02f68f6c08d1d20e0579966bf3f6c1dc5a3a9210375d7538e66e7ceefa7503ddd4f37b1215"}}, &(0x7f0000000640)={0x0, 0x22, 0x1b, {[@local=@item_4={0x3, 0x2, 0x3, "df1657e9"}, @global=@item_012={0x1, 0x1, 0x6, 'g'}, @main=@item_4={0x3, 0x0, 0xa, '\bD>?'}, @global=@item_4={0x3, 0x1, 0x1, "0b22a55d"}, @local=@item_012={0x2, 0x2, 0x4, "20cc"}, @local=@item_012={0x1, 0x2, 0x6, '['}, @global=@item_012={0x1, 0x1, 0x3, "13"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_012={0x1, 0x1, 0x4, ','}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x7f, 0x1, {0x22, 0x42d}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000700)={0x20, 0x9, 0x21, "f0233c6391ac2caee9a1080c77e21314be5798420ed0d981a07658de5a68d0c138"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000880)={0x20, 0x1, 0xc, "fc318e7e366be08660eecda5"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x1f}}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) 10:52:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:19 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bded"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:19 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x900) [ 359.449095][T13078] input: syz1 as /devices/virtual/input/input129 10:52:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x400448c9) 10:52:19 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bded"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 359.588018][T13090] input: syz1 as /devices/virtual/input/input132 [ 359.695695][ T3672] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 359.735503][ T3664] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 359.895290][ T3672] usb 2-1: device descriptor read/64, error 18 [ 360.095492][ T3664] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.117466][ T3664] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.133320][ T3664] usb 1-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.40 [ 360.150745][ T3664] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.163221][ T3664] usb 1-1: config 0 descriptor?? [ 360.175399][ T3672] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 360.385343][ T3672] usb 2-1: device descriptor read/64, error 18 [ 360.407814][T13082] UDC core: couldn't find an available UDC or it's busy: -16 [ 360.415846][T13082] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 360.522469][ T3672] usb usb2-port1: attempt power cycle [ 360.725369][ T3664] usbhid 1-1:0.0: can't add hid device: -71 [ 360.731491][ T3664] usbhid: probe of 1-1:0.0 failed with error -71 [ 360.756121][ T3664] usb 1-1: USB disconnect, device number 13 [ 360.945311][ T3672] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 361.055789][ T3672] usb 2-1: Invalid ep0 maxpacket: 0 [ 361.215484][ T3672] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 361.306948][ T3672] usb 2-1: Invalid ep0 maxpacket: 0 [ 361.312339][ T3672] usb usb2-port1: unable to enumerate USB device 10:52:22 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x0, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) 10:52:22 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0xa00) 10:52:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x400448dd) 10:52:22 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bded"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:22 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x4b3, 0x3108, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) (async, rerun: 32) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x8241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x20, 0x10, 0x9d, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x8000, 0x1, 0x1, {0x22, 0x856}}, {{{0x9, 0x5, 0x81, 0x3, 0x3f7, 0x58, 0x1, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x20}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x0, 0x55, 0xff, 0x8, 0x20}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x1, 0x7ff}, @ptm_cap={0x3}]}, 0x1, [{0xa7, &(0x7f0000000100)=@string={0xa7, 0x3, "705ec7978194e6b8e6aa8df1b69c711bff8cd81c6f50aa80281c820e4de6337e87a02ec62253fe3747a120f24f508c6575ba76b1959c29584cccfd14dd62b933a279a020b87ec107db7f269f3958a5612b598261a09d1b59c3fc1c292a886a3e7c55dee8dd896a838482fc515dd00e00a316fc625bf7e2024bf4ebbcf2d0aa2c3f037c29e0a14951851389c2414d2278e9c25430505f37b583bce9082f9e4e3c34caf4619c"}}]}) (rerun: 32) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a40)={0x0, 0x0, 0x1, "f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x2801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x70, 0x40, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x5, 0xdf, 0x1, {0x22, 0xc38}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x4b, 0xa1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x2, 0x81, 0xc8}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x10, 0x6, 0x0, 0x40, 0x20, 0x81}, 0xd7, &(0x7f0000000340)={0x5, 0xf, 0xd7, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1f, 0x81, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xfb, 0xc7, 0xfed3, 0x1}, @generic={0x8c, 0x10, 0x4, "655a85f7651e4d0b25c6d5c17b8556a3bb58dfcc5dbdceef1965e216f3927a9c375de78627e632bd43bf4f5b94d39f493ca7062781b76062a79a3b1e4a1d4fb50c7adfcb6bc01af9dfdc682b7f59383a98d0fe0b49be41f17fe98d2566c97aa4b408e512f3ab55563b79b704831bbfb9691e7fc0bb8ed7fe8003d224098d961b505b1793458810f0fb"}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "3b1a3042bc5387579e14062fc8af7544"}, @generic={0x1d, 0x10, 0xb, "ea05922a47d0027b2d08231b4dbe1acd82cd9460ec4d55f03e18"}]}, 0x4, [{0xa, &(0x7f0000000440)=@string={0xa, 0x3, "d381362ab3ec0f8b"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x21, 0x30, {0x30, 0x4, "f1b0524daebfeb018832b2d21d1af9ff9d43005c767336838d4360aacaba8bbe21ef1f6d7c8f82195cf19ac042e5"}}, &(0x7f0000000600)={0x0, 0x3, 0x2f, @string={0x2f, 0x3, "5f0449188bda0ddb02f68f6c08d1d20e0579966bf3f6c1dc5a3a9210375d7538e66e7ceefa7503ddd4f37b1215"}}, &(0x7f0000000640)={0x0, 0x22, 0x1b, {[@local=@item_4={0x3, 0x2, 0x3, "df1657e9"}, @global=@item_012={0x1, 0x1, 0x6, 'g'}, @main=@item_4={0x3, 0x0, 0xa, '\bD>?'}, @global=@item_4={0x3, 0x1, 0x1, "0b22a55d"}, @local=@item_012={0x2, 0x2, 0x4, "20cc"}, @local=@item_012={0x1, 0x2, 0x6, '['}, @global=@item_012={0x1, 0x1, 0x3, "13"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_012={0x1, 0x1, 0x4, ','}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x7f, 0x1, {0x22, 0x42d}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000700)={0x20, 0x9, 0x21, "f0233c6391ac2caee9a1080c77e21314be5798420ed0d981a07658de5a68d0c138"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000880)={0x20, 0x1, 0xc, "fc318e7e366be08660eecda5"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x1f}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) 10:52:22 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 362.431460][T13100] input: syz1 as /devices/virtual/input/input133 10:52:22 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4800) 10:52:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x400454ca) 10:52:22 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 362.662945][T13117] input: syz1 as /devices/virtual/input/input137 [ 362.737338][ T20] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 362.865297][ T5827] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 363.055685][ T5827] usb 2-1: device descriptor read/64, error 18 [ 363.095396][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.106615][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.116843][ T20] usb 1-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.40 [ 363.126389][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.136854][ T20] usb 1-1: config 0 descriptor?? [ 363.325432][ T5827] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 363.475353][ T20] usbhid 1-1:0.0: can't add hid device: -71 [ 363.481592][ T20] usbhid: probe of 1-1:0.0 failed with error -71 [ 363.492223][ T20] usb 1-1: USB disconnect, device number 14 [ 363.515294][ T5827] usb 2-1: device descriptor read/64, error 18 [ 363.635529][ T5827] usb usb2-port1: attempt power cycle [ 364.045312][ T5827] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 364.135592][ T5827] usb 2-1: Invalid ep0 maxpacket: 0 [ 364.295473][ T5827] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 364.405584][ T5827] usb 2-1: Invalid ep0 maxpacket: 0 [ 364.411801][ T5827] usb usb2-port1: unable to enumerate USB device 10:52:25 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x0, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) 10:52:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:25 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) 10:52:25 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x40045564) 10:52:25 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x4b3, 0x3108, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) (async) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x8241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x20, 0x10, 0x9d, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x8000, 0x1, 0x1, {0x22, 0x856}}, {{{0x9, 0x5, 0x81, 0x3, 0x3f7, 0x58, 0x1, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x20}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x0, 0x55, 0xff, 0x8, 0x20}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x1, 0x7ff}, @ptm_cap={0x3}]}, 0x1, [{0xa7, &(0x7f0000000100)=@string={0xa7, 0x3, "705ec7978194e6b8e6aa8df1b69c711bff8cd81c6f50aa80281c820e4de6337e87a02ec62253fe3747a120f24f508c6575ba76b1959c29584cccfd14dd62b933a279a020b87ec107db7f269f3958a5612b598261a09d1b59c3fc1c292a886a3e7c55dee8dd896a838482fc515dd00e00a316fc625bf7e2024bf4ebbcf2d0aa2c3f037c29e0a14951851389c2414d2278e9c25430505f37b583bce9082f9e4e3c34caf4619c"}}]}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a40)={0x0, 0x0, 0x1, "f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x2801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x70, 0x40, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x5, 0xdf, 0x1, {0x22, 0xc38}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x4b, 0xa1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x2, 0x81, 0xc8}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x10, 0x6, 0x0, 0x40, 0x20, 0x81}, 0xd7, &(0x7f0000000340)={0x5, 0xf, 0xd7, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1f, 0x81, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xfb, 0xc7, 0xfed3, 0x1}, @generic={0x8c, 0x10, 0x4, "655a85f7651e4d0b25c6d5c17b8556a3bb58dfcc5dbdceef1965e216f3927a9c375de78627e632bd43bf4f5b94d39f493ca7062781b76062a79a3b1e4a1d4fb50c7adfcb6bc01af9dfdc682b7f59383a98d0fe0b49be41f17fe98d2566c97aa4b408e512f3ab55563b79b704831bbfb9691e7fc0bb8ed7fe8003d224098d961b505b1793458810f0fb"}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "3b1a3042bc5387579e14062fc8af7544"}, @generic={0x1d, 0x10, 0xb, "ea05922a47d0027b2d08231b4dbe1acd82cd9460ec4d55f03e18"}]}, 0x4, [{0xa, &(0x7f0000000440)=@string={0xa, 0x3, "d381362ab3ec0f8b"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x458}}]}) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x21, 0x30, {0x30, 0x4, "f1b0524daebfeb018832b2d21d1af9ff9d43005c767336838d4360aacaba8bbe21ef1f6d7c8f82195cf19ac042e5"}}, &(0x7f0000000600)={0x0, 0x3, 0x2f, @string={0x2f, 0x3, "5f0449188bda0ddb02f68f6c08d1d20e0579966bf3f6c1dc5a3a9210375d7538e66e7ceefa7503ddd4f37b1215"}}, &(0x7f0000000640)={0x0, 0x22, 0x1b, {[@local=@item_4={0x3, 0x2, 0x3, "df1657e9"}, @global=@item_012={0x1, 0x1, 0x6, 'g'}, @main=@item_4={0x3, 0x0, 0xa, '\bD>?'}, @global=@item_4={0x3, 0x1, 0x1, "0b22a55d"}, @local=@item_012={0x2, 0x2, 0x4, "20cc"}, @local=@item_012={0x1, 0x2, 0x6, '['}, @global=@item_012={0x1, 0x1, 0x3, "13"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_012={0x1, 0x1, 0x4, ','}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x7f, 0x1, {0x22, 0x42d}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000700)={0x20, 0x9, 0x21, "f0233c6391ac2caee9a1080c77e21314be5798420ed0d981a07658de5a68d0c138"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000880)={0x20, 0x1, 0xc, "fc318e7e366be08660eecda5"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x1f}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) 10:52:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 365.501705][T13127] input: syz1 as /devices/virtual/input/input138 [ 365.513146][T13130] validate_nla: 25 callbacks suppressed [ 365.513164][T13130] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 365.514172][T13132] UDC core: couldn't find an available UDC or it's busy: -16 10:52:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x40045565) [ 365.558616][T13130] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 365.591892][T13132] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:52:25 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x6800) [ 365.628538][T13136] input: syz1 as /devices/virtual/input/input140 [ 365.646649][T13130] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 365.670873][T13142] input: syz1 as /devices/virtual/input/input141 10:52:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 365.679807][T13130] netlink: 'syz-executor.2': attribute type 13 has an invalid length. 10:52:25 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x40045566) [ 365.762704][T13146] input: syz1 as /devices/virtual/input/input142 [ 365.775513][T12305] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 365.814007][T13149] input: syz1 as /devices/virtual/input/input143 [ 365.975608][ T3672] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 366.135631][T12305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.146677][T12305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.160307][T12305] usb 1-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.40 [ 366.169693][T12305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.183466][T12305] usb 1-1: config 0 descriptor?? [ 366.195431][ T3672] usb 2-1: device descriptor read/64, error 18 [ 366.475368][ T3672] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 366.525454][T12305] usbhid 1-1:0.0: can't add hid device: -71 [ 366.531591][T12305] usbhid: probe of 1-1:0.0 failed with error -71 [ 366.539801][T12305] usb 1-1: USB disconnect, device number 15 [ 366.675374][ T3672] usb 2-1: device descriptor read/64, error 18 [ 366.796381][ T3672] usb usb2-port1: attempt power cycle [ 367.245383][ T3672] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 367.335627][ T3672] usb 2-1: Invalid ep0 maxpacket: 0 [ 367.485334][ T3672] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 367.575549][ T3672] usb 2-1: Invalid ep0 maxpacket: 0 [ 367.580999][ T3672] usb usb2-port1: unable to enumerate USB device 10:52:28 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) 10:52:28 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x6c00) 10:52:28 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x40045567) 10:52:28 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00) [ 368.546173][T13154] input: syz1 as /devices/virtual/input/input144 [ 368.547242][T13160] input: syz1 as /devices/virtual/input/input145 10:52:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x40045568) 10:52:28 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:28 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x7400) 10:52:28 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4800) 10:52:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:29 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 368.746866][T13170] input: syz1 as /devices/virtual/input/input146 [ 368.810218][T13172] input: syz1 as /devices/virtual/input/input147 [ 369.015416][ T3672] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 369.405433][ T3672] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 369.413770][ T3672] usb 2-1: config 0 has no interface number 0 [ 369.421130][ T3672] usb 2-1: config 0 interface 105 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 369.432617][ T3672] usb 2-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 369.441968][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.460251][ T3672] usb 2-1: config 0 descriptor?? [ 369.509408][ T3672] snd-usb-audio: probe of 2-1:0.105 failed with error -2 [ 369.713633][ T3664] usb 2-1: USB disconnect, device number 38 10:52:30 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) 10:52:30 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x7a00) 10:52:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x40045569) 10:52:30 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:30 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x7400) 10:52:30 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 370.283082][T13181] input: syz1 as /devices/virtual/input/input148 [ 370.290924][T13183] input: syz1 as /devices/virtual/input/input149 10:52:30 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x8020) 10:52:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:30 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xb5, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)={@private1, 0x0}, &(0x7f0000000200)=0x14) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x109002) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0}, &(0x7f0000000640)=0x14) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000680)={0x0, @xdp={0x2c, 0xa, r3, 0x2b}, @phonet={0x23, 0xd0, 0x8, 0x77}, @qipcrtr={0x2a, 0xffffffff, 0x1}, 0x4, 0x0, 0x0, 0x0, 0xc1df, 0x0, 0x2, 0x596348a2, 0xfffe}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28001d00041152a458030100000000000000000200", @ANYRES32=0x0, @ANYBLOB="000000000000000008001a8004000500"], 0x28}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000840)={r4}, 0x8) sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=@bridge_getlink={0xc0, 0x12, 0x300, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x44200, 0x10}, [@IFLA_MAP={0x24, 0xe, {0x4b0, 0x1, 0x0, 0x3, 0x2}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x800}, @IFLA_EXT_MASK={0x8, 0x1d, 0xb59}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_hsr\x00'}, {0x14, 0x35, 'veth1_to_bond\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x9}, @IFLA_IFALIAS={0x14, 0x14, 'wg1\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040810) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x6f312469d0b678b4, 0x8}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x0, &(0x7f0000000040), &(0x7f00000000c0)='syzkaller\x00', 0x9d, 0xb0, &(0x7f0000000100)=""/176, 0x41000, 0x1, '\x00', r1, 0x1e, r0, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x6, 0xb65, 0x80}, 0x10, 0x0, r2, 0x0, &(0x7f0000000340)=[r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 10:52:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x4004556a) 10:52:30 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 370.447431][T13192] input: syz1 as /devices/virtual/input/input150 [ 370.482052][T13196] input: syz1 as /devices/virtual/input/input151 [ 370.617438][ T3672] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 371.015636][ T3672] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 371.023841][ T3672] usb 2-1: config 0 has no interface number 0 [ 371.031085][ T3672] usb 2-1: config 0 interface 105 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 371.041267][ T3672] usb 2-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 371.050557][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.071030][ T3672] usb 2-1: config 0 descriptor?? [ 371.131137][ T3672] snd-usb-audio: probe of 2-1:0.105 failed with error -2 [ 371.334186][ T3672] usb 2-1: USB disconnect, device number 39 10:52:32 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) 10:52:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:32 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x4004556b) 10:52:32 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0xf0ff1f) 10:52:32 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xb5, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)={@private1, 0x0}, &(0x7f0000000200)=0x14) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x109002) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0}, &(0x7f0000000640)=0x14) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000680)={0x0, @xdp={0x2c, 0xa, r3, 0x2b}, @phonet={0x23, 0xd0, 0x8, 0x77}, @qipcrtr={0x2a, 0xffffffff, 0x1}, 0x4, 0x0, 0x0, 0x0, 0xc1df, 0x0, 0x2, 0x596348a2, 0xfffe}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28001d00041152a458030100000000000000000200", @ANYRES32=0x0, @ANYBLOB="000000000000000008001a8004000500"], 0x28}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000840)={r4}, 0x8) sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=@bridge_getlink={0xc0, 0x12, 0x300, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x44200, 0x10}, [@IFLA_MAP={0x24, 0xe, {0x4b0, 0x1, 0x0, 0x3, 0x2}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x800}, @IFLA_EXT_MASK={0x8, 0x1d, 0xb59}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_hsr\x00'}, {0x14, 0x35, 'veth1_to_bond\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x9}, @IFLA_IFALIAS={0x14, 0x14, 'wg1\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040810) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x6f312469d0b678b4, 0x8}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x0, &(0x7f0000000040), &(0x7f00000000c0)='syzkaller\x00', 0x9d, 0xb0, &(0x7f0000000100)=""/176, 0x41000, 0x1, '\x00', r1, 0x1e, r0, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x6, 0xb65, 0x80}, 0x10, 0x0, r2, 0x0, &(0x7f0000000340)=[r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xb5, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)={@private1}, &(0x7f0000000200)=0x14) (async) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x109002) (async) getsockname$packet(r2, &(0x7f0000000600), &(0x7f0000000640)=0x14) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) (async) socket$inet6(0xa, 0x3, 0x6) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) (async) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000680)={0x0, @xdp={0x2c, 0xa, r3, 0x2b}, @phonet={0x23, 0xd0, 0x8, 0x77}, @qipcrtr={0x2a, 0xffffffff, 0x1}, 0x4, 0x0, 0x0, 0x0, 0xc1df, 0x0, 0x2, 0x596348a2, 0xfffe}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28001d00041152a458030100000000000000000200", @ANYRES32=0x0, @ANYBLOB="000000000000000008001a8004000500"], 0x28}}, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0x4) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000840)={r4}, 0x8) (async) sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=@bridge_getlink={0xc0, 0x12, 0x300, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x44200, 0x10}, [@IFLA_MAP={0x24, 0xe, {0x4b0, 0x1, 0x0, 0x3, 0x2}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x800}, @IFLA_EXT_MASK={0x8, 0x1d, 0xb59}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_hsr\x00'}, {0x14, 0x35, 'veth1_to_bond\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x9}, @IFLA_IFALIAS={0x14, 0x14, 'wg1\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040810) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r7) (async) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x6f312469d0b678b4, 0x8}}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x0, &(0x7f0000000040), &(0x7f00000000c0)='syzkaller\x00', 0x9d, 0xb0, &(0x7f0000000100)=""/176, 0x41000, 0x1, '\x00', r1, 0x1e, r0, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x6, 0xb65, 0x80}, 0x10, 0x0, r2, 0x0, &(0x7f0000000340)=[r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) 10:52:32 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 371.894437][T13212] input: syz1 as /devices/virtual/input/input153 [ 371.900733][T13213] input: syz1 as /devices/virtual/input/input152 10:52:32 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f5", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 371.962424][T13207] warn_alloc: 1 callbacks suppressed [ 371.962440][T13207] syz-executor.0: vmalloc error: size 24576, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 372.033948][T13207] CPU: 0 PID: 13207 Comm: syz-executor.0 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 372.044494][T13207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.054565][T13207] Call Trace: [ 372.057854][T13207] [ 372.060798][T13207] dump_stack_lvl+0xcd/0x134 [ 372.065417][T13207] warn_alloc.cold+0x9b/0x189 [ 372.070172][T13207] ? zone_watermark_ok_safe+0x290/0x290 [ 372.075744][T13207] ? __kmalloc_node+0x62/0x4a0 [ 372.080533][T13207] ? __vmalloc_node_range+0x7bf/0x1060 [ 372.086051][T13207] __vmalloc_node_range+0xe18/0x1060 [ 372.091374][T13207] ? vfree_atomic+0xe0/0xe0 [ 372.095905][T13207] ? rcu_read_lock_sched_held+0x3a/0x70 [ 372.101539][T13207] ? kernel_clone+0xe7/0xab0 [ 372.106136][T13207] copy_process+0x926/0x7250 [ 372.110714][T13207] ? kernel_clone+0xe7/0xab0 [ 372.115300][T13207] ? find_held_lock+0x2d/0x110 [ 372.120054][T13207] ? __cleanup_sighand+0xb0/0xb0 [ 372.124977][T13207] ? __lock_acquire+0x1666/0x56c0 [ 372.130015][T13207] ? kernel_clone+0x314/0xab0 [ 372.134679][T13207] kernel_clone+0xe7/0xab0 [ 372.139108][T13207] ? create_io_thread+0xf0/0xf0 [ 372.143961][T13207] ? find_held_lock+0x2d/0x110 [ 372.148725][T13207] __do_sys_clone+0xc8/0x110 [ 372.153306][T13207] ? kernel_clone+0xab0/0xab0 [ 372.157973][T13207] ? syscall_enter_from_user_mode+0x21/0x70 [ 372.163863][T13207] do_syscall_64+0x35/0xb0 [ 372.168270][T13207] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 372.174150][T13207] RIP: 0033:0x7f6f1333f481 [ 372.178570][T13207] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 372.198169][T13207] RSP: 002b:00007f6f13984a68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 372.206582][T13207] RAX: ffffffffffffffda RBX: 00007f6f11b06700 RCX: 00007f6f1333f481 [ 372.214682][T13207] RDX: 00007f6f11b069d0 RSI: 00007f6f11b062f0 RDI: 00000000003d0f00 [ 372.222643][T13207] RBP: 00007f6f13984cb0 R08: 00007f6f11b06700 R09: 00007f6f11b06700 10:52:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x4004556d) [ 372.230602][T13207] R10: 00007f6f11b069d0 R11: 0000000000000206 R12: 00007f6f13984b1e [ 372.238561][T13207] R13: 00007f6f13984b1f R14: 00007f6f11b06300 R15: 0000000000022000 [ 372.246560][T13207] [ 372.258059][T13207] Mem-Info: [ 372.261203][T13207] active_anon:583 inactive_anon:99035 isolated_anon:0 [ 372.261203][T13207] active_file:3788 inactive_file:7306 isolated_file:0 [ 372.261203][T13207] unevictable:768 dirty:0 writeback:0 10:52:32 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x1000000) 10:52:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 372.261203][T13207] slab_reclaimable:18816 slab_unreclaimable:103330 [ 372.261203][T13207] mapped:27967 shmem:2155 pagetables:971 bounce:0 [ 372.261203][T13207] kernel_misc_reclaimable:0 [ 372.261203][T13207] free:1365416 free_pcp:12334 free_cma:0 [ 372.314451][T13233] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 372.352326][T13232] input: syz1 as /devices/virtual/input/input154 [ 372.368475][T13237] input: syz1 as /devices/virtual/input/input155 10:52:32 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f5", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 372.374219][T13207] Node 0 active_anon:2324kB inactive_anon:395508kB active_file:15084kB inactive_file:29224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111868kB dirty:0kB writeback:0kB shmem:6144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB kernel_stack:13192kB pagetables:3980kB all_unreclaimable? no [ 372.486947][ T3672] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 372.492163][T13207] Node 1 active_anon:8kB inactive_anon:932kB active_file:68kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 372.525173][T13240] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 372.537249][T13207] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 372.565065][T13207] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 372.571562][T13207] Node 0 DMA32 free:1500028kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:2324kB inactive_anon:395184kB active_file:15084kB inactive_file:29224kB unevictable:1536kB writepending:0kB present:3129332kB managed:2716644kB mlocked:0kB bounce:0kB free_pcp:42616kB local_pcp:22200kB free_cma:0kB [ 372.604625][T13207] lowmem_reserve[]: 0 0 0 0 0 [ 372.609604][T13207] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 372.638508][T13207] lowmem_reserve[]: 0 0 0 0 0 [ 372.643215][T13207] Node 1 Normal free:3946844kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:68kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:6432kB local_pcp:3416kB free_cma:0kB [ 372.672963][T13207] lowmem_reserve[]: 0 0 0 0 0 [ 372.677946][T13207] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 372.690737][T13207] Node 0 DMA32: 2667*4kB (UME) 1021*8kB (UME) 443*16kB (UME) 378*32kB (UME) 134*64kB (UME) 79*128kB (UME) 29*256kB (UME) 14*512kB (UME) 10*1024kB (UME) 3*2048kB (M) 345*4096kB (UM) = 1500804kB [ 372.711126][T13207] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 372.722697][T13207] Node 1 Normal: 103*4kB (UE) 32*8kB (UME) 24*16kB (UE) 126*32kB (UE) 40*64kB (UME) 17*128kB (UME) 7*256kB (U) 4*512kB (UE) 1*1024kB (E) 0*2048kB 960*4096kB (M) = 3946844kB [ 372.740256][T13207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 372.752849][T13207] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 372.762404][T13207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 372.772119][T13207] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 372.781597][T13207] 13251 total pagecache pages [ 372.786445][T13207] 0 pages in swap cache [ 372.790596][T13207] Swap cache stats: add 0, delete 0, find 0/0 [ 372.796794][T13207] Free swap = 0kB [ 372.800513][T13207] Total swap = 0kB [ 372.804231][T13207] 2097051 pages RAM [ 372.809768][T13207] 0 pages HighMem/MovableOnly [ 372.814452][T13207] 384545 pages reserved [ 372.818801][T13207] 0 pages cma reserved [ 372.885536][ T3672] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 372.895750][ T3672] usb 2-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 372.904817][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.918172][ T3672] usb 2-1: config 0 descriptor?? [ 372.959465][ T3672] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 373.160323][ T5827] usb 2-1: USB disconnect, device number 40 10:52:33 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x2000000) 10:52:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x4004556e) 10:52:33 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f5", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:33 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0x85, 0x8b}}]}}]}}, 0x0) 10:52:33 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xb5, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)={@private1, 0x0}, &(0x7f0000000200)=0x14) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x109002) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0}, &(0x7f0000000640)=0x14) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) (async) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) (rerun: 32) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000680)={0x0, @xdp={0x2c, 0xa, r3, 0x2b}, @phonet={0x23, 0xd0, 0x8, 0x77}, @qipcrtr={0x2a, 0xffffffff, 0x1}, 0x4, 0x0, 0x0, 0x0, 0xc1df, 0x0, 0x2, 0x596348a2, 0xfffe}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28001d00041152a458030100000000000000000200", @ANYRES32=0x0, @ANYBLOB="000000000000000008001a8004000500"], 0x28}}, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0x4) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000840)={r4}, 0x8) (async) sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=@bridge_getlink={0xc0, 0x12, 0x300, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x44200, 0x10}, [@IFLA_MAP={0x24, 0xe, {0x4b0, 0x1, 0x0, 0x3, 0x2}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x800}, @IFLA_EXT_MASK={0x8, 0x1d, 0xb59}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_hsr\x00'}, {0x14, 0x35, 'veth1_to_bond\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x9}, @IFLA_IFALIAS={0x14, 0x14, 'wg1\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040810) (async, rerun: 32) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x6f312469d0b678b4, 0x8}}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x0, &(0x7f0000000040), &(0x7f00000000c0)='syzkaller\x00', 0x9d, 0xb0, &(0x7f0000000100)=""/176, 0x41000, 0x1, '\x00', r1, 0x1e, r0, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x6, 0xb65, 0x80}, 0x10, 0x0, r2, 0x0, &(0x7f0000000340)=[r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 373.711571][T13246] input: syz1 as /devices/virtual/input/input156 [ 373.717328][T13250] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 373.733221][T13249] input: syz1 as /devices/virtual/input/input157 10:52:34 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x3000000) 10:52:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:34 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffff", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x40049409) 10:52:34 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4000000) [ 373.870346][T13260] input: syz1 as /devices/virtual/input/input158 [ 373.870688][T13263] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 373.897396][T13264] input: syz1 as /devices/virtual/input/input159 10:52:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x4008556c) 10:52:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:34 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffff", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 374.015563][ T3678] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 374.033700][T13269] input: syz1 as /devices/virtual/input/input160 [ 374.054051][T13271] input: syz1 as /devices/virtual/input/input161 10:52:34 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x5000000) [ 374.075574][T13272] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. 10:52:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 374.212234][T13277] input: syz1 as /devices/virtual/input/input162 [ 374.395989][ T3678] usb 2-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 374.405074][ T3678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.421537][ T3678] usb 2-1: config 0 descriptor?? [ 374.467480][ T3678] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 374.678382][ T3678] usb 2-1: USB disconnect, device number 41 10:52:35 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0x85, 0x8b}}]}}]}}, 0x0) 10:52:35 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffff", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x40086602) 10:52:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:35 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x6000000) 10:52:35 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x1000000) 10:52:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 375.231769][T13284] input: syz1 as /devices/virtual/input/input163 [ 375.249782][T13287] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. 10:52:35 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffff", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x400c55cb) 10:52:35 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x7000000) 10:52:35 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x200) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x7, [[0x1, 0x8465, 0x0, 0x1, 0x0, 0x5, 0x8, 0xd7f5], [0x3, 0x3, 0x75, 0x974, 0x0, 0x5, 0x80ce, 0x9], [0x101, 0x9, 0x9, 0x8, 0x3, 0x7ff, 0x6, 0x101]], '\x00', [{0x3, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3f, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x80000000, 0xffffffff, 0x1, 0x1, 0x0, 0x1}, {0x51, 0x80, 0x1}, {0x236, 0xfffffffc, 0x1, 0x1, 0x1}, {0xfff, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x7, 0x3e6b, 0x1, 0x1}, {0xfffffffc, 0x1f, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x2, 0x0, 0x0, 0x1}, {0x76e, 0x586, 0x0, 0x1}, {0x8d, 0x8, 0x0, 0x1, 0x1, 0x1}], '\x00', 0x2}) r1 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x6, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000300)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000340)={0x2, [[0x8a, 0x7, 0x1, 0x80000000, 0x3f, 0x5, 0xbc, 0xfff], [0x9, 0x30c, 0x40, 0x1, 0x9, 0x1ff, 0x1ff, 0x4], [0x5, 0x800, 0x3ff, 0x8000, 0x7fff, 0x401]], '\x00', [{0x6, 0x1f, 0x1, 0x1}, {0x7fffffff, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x6}, {0x5, 0x7f, 0x1, 0x1}, {0xa5, 0x9, 0x1, 0x1, 0x0, 0x1}, {0xd1, 0x7ff, 0x1, 0x1, 0x1, 0x1}, {0xfffffffd, 0xfffffffc}, {0x40, 0xb46, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x0, 0x1, 0x1}, {0x6, 0xfd, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x26}) r2 = inotify_init1(0x80000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000005c0)={{r2}, "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"}) r3 = openat$incfs(r0, &(0x7f00000015c0)='.pending_reads\x00', 0x20200, 0xd2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000001600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001640)='./file0/file0\x00', &(0x7f0000001680)={0x20000, 0x1, 0x2}, 0x18) renameat2(r5, &(0x7f00000016c0)='./file0/file0\x00', r4, &(0x7f0000001700)='./file0\x00', 0x1) r6 = fsmount(r4, 0x1, 0x80) sendmsg$key(r6, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001740)={0x2, 0xc, 0x81, 0x7, 0x18, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_sec_ctx={0xe, 0x18, 0x0, 0x1, 0x67, "aa399188c1d9c1bee9603aba5deca90d27788b3ecb60b1987d1b7524ae31ea0c5f1c6985ea838cacf7bd8e9c09661313c56d8015203b942ae63e09d8a4c4f283ed99bca0f833d6ce0596c8fc135ccec3ba78a179ea52ac68e37ce945f227bba00ec3c2b1f48264"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e20, @rand_addr=0x64010101}}, @sadb_address={0x3, 0x5, 0x2b, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010101}}]}, 0xc0}}, 0x875b18d6db380c41) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001880)={0x0, 0x7, 0x3, [0x6, 0x4, 0x7]}, 0xe) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/crypto\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0x80184132, &(0x7f0000001900)) inotify_add_watch(r0, &(0x7f0000001940)='./file0/file0\x00', 0x1000800) r8 = creat(&(0x7f0000001980)='./file0\x00', 0x22) ioctl$BTRFS_IOC_SEND(r8, 0x40489426, &(0x7f0000001a00)={{}, 0x5, &(0x7f00000019c0)=[0x1, 0x5, 0x7f, 0x4, 0x1], 0x4, 0x2, 0x1}) open(&(0x7f0000001a80)='./file0\x00', 0x200000, 0x20) 10:52:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 375.401312][T13295] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 375.425176][T13295] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.2'. [ 375.436647][T13297] input: syz1 as /devices/virtual/input/input166 [ 375.535654][ T3678] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 375.895493][ T3678] usb 2-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 375.904535][ T3678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.927165][ T3678] usb 2-1: config 0 descriptor?? [ 375.967387][ T3678] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 376.170871][ T34] usb 2-1: USB disconnect, device number 42 10:52:36 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0x85, 0x8b}}]}}]}}, 0x0) 10:52:36 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x200) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x7, [[0x1, 0x8465, 0x0, 0x1, 0x0, 0x5, 0x8, 0xd7f5], [0x3, 0x3, 0x75, 0x974, 0x0, 0x5, 0x80ce, 0x9], [0x101, 0x9, 0x9, 0x8, 0x3, 0x7ff, 0x6, 0x101]], '\x00', [{0x3, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3f, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x80000000, 0xffffffff, 0x1, 0x1, 0x0, 0x1}, {0x51, 0x80, 0x1}, {0x236, 0xfffffffc, 0x1, 0x1, 0x1}, {0xfff, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x7, 0x3e6b, 0x1, 0x1}, {0xfffffffc, 0x1f, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x2, 0x0, 0x0, 0x1}, {0x76e, 0x586, 0x0, 0x1}, {0x8d, 0x8, 0x0, 0x1, 0x1, 0x1}], '\x00', 0x2}) (async) r1 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x6, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000300)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000340)={0x2, [[0x8a, 0x7, 0x1, 0x80000000, 0x3f, 0x5, 0xbc, 0xfff], [0x9, 0x30c, 0x40, 0x1, 0x9, 0x1ff, 0x1ff, 0x4], [0x5, 0x800, 0x3ff, 0x8000, 0x7fff, 0x401]], '\x00', [{0x6, 0x1f, 0x1, 0x1}, {0x7fffffff, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x6}, {0x5, 0x7f, 0x1, 0x1}, {0xa5, 0x9, 0x1, 0x1, 0x0, 0x1}, {0xd1, 0x7ff, 0x1, 0x1, 0x1, 0x1}, {0xfffffffd, 0xfffffffc}, {0x40, 0xb46, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x0, 0x1, 0x1}, {0x6, 0xfd, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x26}) (async) r2 = inotify_init1(0x80000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000005c0)={{r2}, "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"}) r3 = openat$incfs(r0, &(0x7f00000015c0)='.pending_reads\x00', 0x20200, 0xd2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000001600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001640)='./file0/file0\x00', &(0x7f0000001680)={0x20000, 0x1, 0x2}, 0x18) renameat2(r5, &(0x7f00000016c0)='./file0/file0\x00', r4, &(0x7f0000001700)='./file0\x00', 0x1) (async) r6 = fsmount(r4, 0x1, 0x80) sendmsg$key(r6, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001740)={0x2, 0xc, 0x81, 0x7, 0x18, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_sec_ctx={0xe, 0x18, 0x0, 0x1, 0x67, "aa399188c1d9c1bee9603aba5deca90d27788b3ecb60b1987d1b7524ae31ea0c5f1c6985ea838cacf7bd8e9c09661313c56d8015203b942ae63e09d8a4c4f283ed99bca0f833d6ce0596c8fc135ccec3ba78a179ea52ac68e37ce945f227bba00ec3c2b1f48264"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e20, @rand_addr=0x64010101}}, @sadb_address={0x3, 0x5, 0x2b, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010101}}]}, 0xc0}}, 0x875b18d6db380c41) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001880)={0x0, 0x7, 0x3, [0x6, 0x4, 0x7]}, 0xe) (async, rerun: 64) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/crypto\x00', 0x0, 0x0) (rerun: 64) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0x80184132, &(0x7f0000001900)) (async) inotify_add_watch(r0, &(0x7f0000001940)='./file0/file0\x00', 0x1000800) (async, rerun: 64) r8 = creat(&(0x7f0000001980)='./file0\x00', 0x22) (rerun: 64) ioctl$BTRFS_IOC_SEND(r8, 0x40489426, &(0x7f0000001a00)={{}, 0x5, &(0x7f00000019c0)=[0x1, 0x5, 0x7f, 0x4, 0x1], 0x4, 0x2, 0x1}) (async) open(&(0x7f0000001a80)='./file0\x00', 0x200000, 0x20) 10:52:36 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffff", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:36 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x9000000) 10:52:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x40186366) [ 376.736983][T13312] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 376.741573][T13311] input: syz1 as /devices/virtual/input/input168 10:52:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:37 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0xa000000) [ 376.777846][T13312] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.2'. 10:52:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x401c5820) 10:52:37 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffff", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 376.889456][T13323] input: syz1 as /devices/virtual/input/input170 10:52:37 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x1ffff000) 10:52:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 376.949202][T13326] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 377.004127][T13326] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.2'. [ 377.035779][T12305] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 377.395468][T12305] usb 2-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 377.404601][T12305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.422743][T12305] usb 2-1: config 0 descriptor?? [ 377.468468][T12305] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 377.672355][ T141] usb 2-1: USB disconnect, device number 43 10:52:38 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{}]}}]}}]}}, 0x0) 10:52:38 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x4020940d) 10:52:38 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x200) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x7, [[0x1, 0x8465, 0x0, 0x1, 0x0, 0x5, 0x8, 0xd7f5], [0x3, 0x3, 0x75, 0x974, 0x0, 0x5, 0x80ce, 0x9], [0x101, 0x9, 0x9, 0x8, 0x3, 0x7ff, 0x6, 0x101]], '\x00', [{0x3, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3f, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x80000000, 0xffffffff, 0x1, 0x1, 0x0, 0x1}, {0x51, 0x80, 0x1}, {0x236, 0xfffffffc, 0x1, 0x1, 0x1}, {0xfff, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x7, 0x3e6b, 0x1, 0x1}, {0xfffffffc, 0x1f, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x2, 0x0, 0x0, 0x1}, {0x76e, 0x586, 0x0, 0x1}, {0x8d, 0x8, 0x0, 0x1, 0x1, 0x1}], '\x00', 0x2}) r1 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x6, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000300)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000340)={0x2, [[0x8a, 0x7, 0x1, 0x80000000, 0x3f, 0x5, 0xbc, 0xfff], [0x9, 0x30c, 0x40, 0x1, 0x9, 0x1ff, 0x1ff, 0x4], [0x5, 0x800, 0x3ff, 0x8000, 0x7fff, 0x401]], '\x00', [{0x6, 0x1f, 0x1, 0x1}, {0x7fffffff, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x6}, {0x5, 0x7f, 0x1, 0x1}, {0xa5, 0x9, 0x1, 0x1, 0x0, 0x1}, {0xd1, 0x7ff, 0x1, 0x1, 0x1, 0x1}, {0xfffffffd, 0xfffffffc}, {0x40, 0xb46, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x0, 0x1, 0x1}, {0x6, 0xfd, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x26}) r2 = inotify_init1(0x80000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000005c0)={{r2}, "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"}) r3 = openat$incfs(r0, &(0x7f00000015c0)='.pending_reads\x00', 0x20200, 0xd2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000001600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001640)='./file0/file0\x00', &(0x7f0000001680)={0x20000, 0x1, 0x2}, 0x18) renameat2(r5, &(0x7f00000016c0)='./file0/file0\x00', r4, &(0x7f0000001700)='./file0\x00', 0x1) r6 = fsmount(r4, 0x1, 0x80) sendmsg$key(r6, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001740)={0x2, 0xc, 0x81, 0x7, 0x18, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_sec_ctx={0xe, 0x18, 0x0, 0x1, 0x67, "aa399188c1d9c1bee9603aba5deca90d27788b3ecb60b1987d1b7524ae31ea0c5f1c6985ea838cacf7bd8e9c09661313c56d8015203b942ae63e09d8a4c4f283ed99bca0f833d6ce0596c8fc135ccec3ba78a179ea52ac68e37ce945f227bba00ec3c2b1f48264"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e20, @rand_addr=0x64010101}}, @sadb_address={0x3, 0x5, 0x2b, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010101}}]}, 0xc0}}, 0x875b18d6db380c41) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001880)={0x0, 0x7, 0x3, [0x6, 0x4, 0x7]}, 0xe) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/crypto\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0x80184132, &(0x7f0000001900)) inotify_add_watch(r0, &(0x7f0000001940)='./file0/file0\x00', 0x1000800) r8 = creat(&(0x7f0000001980)='./file0\x00', 0x22) ioctl$BTRFS_IOC_SEND(r8, 0x40489426, &(0x7f0000001a00)={{}, 0x5, &(0x7f00000019c0)=[0x1, 0x5, 0x7f, 0x4, 0x1], 0x4, 0x2, 0x1}) open(&(0x7f0000001a80)='./file0\x00', 0x200000, 0x20) syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x200) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x7, [[0x1, 0x8465, 0x0, 0x1, 0x0, 0x5, 0x8, 0xd7f5], [0x3, 0x3, 0x75, 0x974, 0x0, 0x5, 0x80ce, 0x9], [0x101, 0x9, 0x9, 0x8, 0x3, 0x7ff, 0x6, 0x101]], '\x00', [{0x3, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3f, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x80000000, 0xffffffff, 0x1, 0x1, 0x0, 0x1}, {0x51, 0x80, 0x1}, {0x236, 0xfffffffc, 0x1, 0x1, 0x1}, {0xfff, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x7, 0x3e6b, 0x1, 0x1}, {0xfffffffc, 0x1f, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x2, 0x0, 0x0, 0x1}, {0x76e, 0x586, 0x0, 0x1}, {0x8d, 0x8, 0x0, 0x1, 0x1, 0x1}], '\x00', 0x2}) (async) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x6, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000300)) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000340)={0x2, [[0x8a, 0x7, 0x1, 0x80000000, 0x3f, 0x5, 0xbc, 0xfff], [0x9, 0x30c, 0x40, 0x1, 0x9, 0x1ff, 0x1ff, 0x4], [0x5, 0x800, 0x3ff, 0x8000, 0x7fff, 0x401]], '\x00', [{0x6, 0x1f, 0x1, 0x1}, {0x7fffffff, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x6}, {0x5, 0x7f, 0x1, 0x1}, {0xa5, 0x9, 0x1, 0x1, 0x0, 0x1}, {0xd1, 0x7ff, 0x1, 0x1, 0x1, 0x1}, {0xfffffffd, 0xfffffffc}, {0x40, 0xb46, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x0, 0x1, 0x1}, {0x6, 0xfd, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x26}) (async) inotify_init1(0x80000) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000005c0)={{r2}, "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"}) (async) openat$incfs(r0, &(0x7f00000015c0)='.pending_reads\x00', 0x20200, 0xd2) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000001600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000001640)='./file0/file0\x00', &(0x7f0000001680)={0x20000, 0x1, 0x2}, 0x18) (async) renameat2(r5, &(0x7f00000016c0)='./file0/file0\x00', r4, &(0x7f0000001700)='./file0\x00', 0x1) (async) fsmount(r4, 0x1, 0x80) (async) sendmsg$key(r6, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001740)={0x2, 0xc, 0x81, 0x7, 0x18, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_sec_ctx={0xe, 0x18, 0x0, 0x1, 0x67, "aa399188c1d9c1bee9603aba5deca90d27788b3ecb60b1987d1b7524ae31ea0c5f1c6985ea838cacf7bd8e9c09661313c56d8015203b942ae63e09d8a4c4f283ed99bca0f833d6ce0596c8fc135ccec3ba78a179ea52ac68e37ce945f227bba00ec3c2b1f48264"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e20, @rand_addr=0x64010101}}, @sadb_address={0x3, 0x5, 0x2b, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010101}}]}, 0xc0}}, 0x875b18d6db380c41) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001880)={0x0, 0x7, 0x3, [0x6, 0x4, 0x7]}, 0xe) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/crypto\x00', 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0x80184132, &(0x7f0000001900)) (async) inotify_add_watch(r0, &(0x7f0000001940)='./file0/file0\x00', 0x1000800) (async) creat(&(0x7f0000001980)='./file0\x00', 0x22) (async) ioctl$BTRFS_IOC_SEND(r8, 0x40489426, &(0x7f0000001a00)={{}, 0x5, &(0x7f00000019c0)=[0x1, 0x5, 0x7f, 0x4, 0x1], 0x4, 0x2, 0x1}) (async) open(&(0x7f0000001a80)='./file0\x00', 0x200000, 0x20) (async) 10:52:38 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x20000000) 10:52:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 378.220213][T13332] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 378.246943][T13338] input: syz1 as /devices/virtual/input/input173 [ 378.247893][T13336] input: syz1 as /devices/virtual/input/input174 [ 378.265081][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.271440][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 10:52:38 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x20800000) 10:52:38 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x405c5503) 10:52:38 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x7000000) 10:52:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 378.454690][T13350] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. 10:52:38 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x21000000) [ 378.506257][T13353] input: syz1 as /devices/virtual/input/input175 [ 378.551405][T13356] input: syz1 as /devices/virtual/input/input176 [ 378.595397][ T141] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 378.956087][ T141] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 378.966656][ T141] usb 2-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 378.976576][ T141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.998565][ T141] usb 2-1: config 0 descriptor?? [ 379.039174][ T141] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 379.241688][ T141] usb 2-1: USB disconnect, device number 44 10:52:40 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{}]}}]}}]}}, 0x0) 10:52:40 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x406855c9) 10:52:40 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x48000000) 10:52:40 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x21000000) 10:52:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 379.786793][T13368] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 379.819064][T13369] input: syz1 as /devices/virtual/input/input177 [ 379.826896][T13367] input: syz1 as /devices/virtual/input/input178 10:52:40 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:40 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c000000) 10:52:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x8004552d) 10:52:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 379.982164][T13376] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 380.012398][T13380] input: syz1 as /devices/virtual/input/input179 [ 380.013670][T13381] input: syz1 as /devices/virtual/input/input180 [ 380.024628][T13376] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 380.045088][T13383] input: syz1 as /devices/virtual/input/input181 10:52:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x80086301) [ 380.088505][T13376] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 380.115445][ T5827] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 380.153257][T13376] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 380.222258][T13386] input: syz1 as /devices/virtual/input/input182 [ 380.475574][ T5827] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 380.486169][ T5827] usb 2-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 380.496292][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.508566][ T5827] usb 2-1: config 0 descriptor?? [ 380.547445][ T5827] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 380.751026][ T34] usb 2-1: USB disconnect, device number 45 10:52:41 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{}]}}]}}]}}, 0x0) 10:52:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:41 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x68000000) 10:52:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:41 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x80086601) 10:52:41 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x6c000000) [ 381.307621][T13392] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 381.322492][T13396] input: syz1 as /devices/virtual/input/input184 [ 381.330955][T13395] input: syz1 as /devices/virtual/input/input183 [ 381.341016][T13392] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 381.350182][T13394] input: syz1 as /devices/virtual/input/input185 [ 381.371839][T13392] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 381.382673][T13392] netlink: 'syz-executor.2': attribute type 13 has an invalid length. 10:52:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:41 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x801c581f) [ 381.440579][ T6833] udevd[6833]: setting owner of /dev/input/event4 to uid=0, gid=1003 failed: No such file or directory 10:52:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 381.518857][T13404] input: syz1 as /devices/virtual/input/input186 [ 381.542782][T13408] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 381.553222][T13407] input: syz1 as /devices/virtual/input/input187 [ 381.560362][T13408] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 10:52:41 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x74000000) [ 381.572804][T13408] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 381.589505][T13411] input: syz1 as /devices/virtual/input/input188 [ 381.597082][T13408] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 381.630508][ T5827] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 382.045560][ T5827] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 382.056205][ T5827] usb 2-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 382.065541][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.075645][ T5827] usb 2-1: config 0 descriptor?? [ 382.118607][ T5827] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 382.323142][ T5827] usb 2-1: USB disconnect, device number 46 10:52:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0xc0045878) 10:52:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:43 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x7a000000) 10:52:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 382.888841][T13424] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 382.907998][T13419] input: syz1 as /devices/virtual/input/input190 [ 382.913583][T13424] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 382.924605][T13423] input: syz1 as /devices/virtual/input/input191 10:52:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 382.984457][T13431] input: syz1 as /devices/virtual/input/input193 10:52:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0xc0045878) 10:52:43 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x2000000000) 10:52:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) [ 383.152760][T13436] input: syz1 as /devices/virtual/input/input195 [ 383.167042][T13441] input: syz1 as /devices/virtual/input/input196 10:52:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:43 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x2100000000) 10:52:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0xc00c55ca) [ 383.218261][T13447] input: syz1 as /devices/virtual/input/input198 10:52:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x0, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 383.326147][T13455] input: syz1 as /devices/virtual/input/input199 [ 383.347594][T13456] input: syz1 as /devices/virtual/input/input201 10:52:43 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x7f3b5c972000) 10:52:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0xc0189436) [ 383.451198][T13465] input: syz1 as /devices/virtual/input/input202 10:52:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x0, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:43 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x7f3b5d193000) 10:52:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 383.577274][T13476] input: syz1 as /devices/virtual/input/input205 [ 383.607627][T13479] input: syz1 as /devices/virtual/input/input206 10:52:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0xc020660b) 10:52:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x0, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:43 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x7f3b5d393000) [ 383.760510][T13493] input: syz1 as /devices/virtual/input/input209 10:52:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 10:52:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0xc06855c8) [ 383.804620][T13496] input: syz1 as /devices/virtual/input/input211 10:52:44 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:44 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x802000000000) [ 383.884160][T13502] input: syz1 as /devices/virtual/input/input213 10:52:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:44 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 383.953505][T13507] input: syz1 as /devices/virtual/input/input215 [ 383.987033][T13510] input: syz1 as /devices/virtual/input/input216 10:52:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:44 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x20975c3b7f0000) 10:52:44 executing program 5: sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0xf, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40400d1}, 0x24000804) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:44 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 10:52:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 384.091213][T13520] input: syz1 as /devices/virtual/input/input218 10:52:44 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) socket(0x10, 0x8000000000000003, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0xe303, 0x0) [ 384.138780][T13526] input: syz1 as /devices/virtual/input/input220 [ 384.146803][T13524] input: syz1 as /devices/virtual/input/input219 10:52:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:44 executing program 5: sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0xf, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40400d1}, 0x24000804) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0xf, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40400d1}, 0x24000804) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) 10:52:44 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x30195d3b7f0000) 10:52:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 10:52:44 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) socket(0x10, 0x8000000000000003, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0xe303, 0x0) 10:52:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 384.259307][T13533] input: syz1 as /devices/virtual/input/input223 10:52:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 384.325870][T13542] input: syz1 as /devices/virtual/input/input224 [ 384.349658][T13547] input: syz1 as /devices/virtual/input/input225 10:52:44 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) socket(0x10, 0x8000000000000003, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0xe303, 0x0) 10:52:44 executing program 5: sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0xf, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40400d1}, 0x24000804) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) (async, rerun: 64) ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 64) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:44 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x30395d3b7f0000) [ 384.375963][T13551] input: syz1 as /devices/virtual/input/input226 [ 384.410660][T13553] input: syz1 as /devices/virtual/input/input227 10:52:44 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 10:52:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:44 executing program 4: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x20975c3b7f0000) 10:52:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 384.488397][T13560] input: syz1 as /devices/virtual/input/input228 [ 384.550463][T13560] input: syz1 as /devices/virtual/input/input229 10:52:44 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) [ 384.593281][T13571] input: syz1 as /devices/virtual/input/input230 [ 384.600341][T13569] input: syz1 as /devices/virtual/input/input231 10:52:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:44 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0xf0ff1f00000000) 10:52:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:44 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fbdc1f50dfbffffffffffffff51", @ANYRES32, @ANYBLOB="00000000000000009c0012001000010069703665727370616e0000008800020014000600000000ff0f0000000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e001000040012f80700aeb7a40000000400120008000800000000001400060000000000000000000000ffff0002000014000600078000000000000000f34800da28538514000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaafaeab05f000000000000000000a2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2bdedeb70a0"], 0xc8}, 0x1, 0x0, 0x0, 0x20cc005}, 0x24008800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 10:52:45 executing program 4: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x7f3b5d193000) [ 384.756835][T13578] input: syz1 as /devices/virtual/input/input232 [ 384.776918][T13583] input: syz1 as /devices/virtual/input/input234 10:52:45 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x100000000000000) 10:52:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:45 executing program 4: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x7f3b5d193000) 10:52:45 executing program 2: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0xf0ff1f00000000) [ 384.977099][T13592] input: syz1 as /devices/virtual/input/input235 10:52:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 64) ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 64) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$UI_DEV_DESTROY(r3, 0x5502) (async, rerun: 32) ioctl$UI_DEV_DESTROY(r0, 0x5502) (rerun: 32) 10:52:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:45 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x200000000000000) 10:52:45 executing program 2: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0xf0ff1f00000000) 10:52:45 executing program 4: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x100000000000000) 10:52:45 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 385.478197][T13605] input: syz1 as /devices/virtual/input/input238 10:52:45 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 10:52:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:45 executing program 2: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0xf0ff1f00000000) 10:52:45 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x300000000000000) 10:52:45 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 385.638736][T13619] input: syz1 as /devices/virtual/input/input240 [ 385.650075][T13613] input: syz1 as /devices/virtual/input/input239 10:52:45 executing program 4: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0xf0ff1f00000000) 10:52:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$UI_DEV_DESTROY(r3, 0x5502) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:46 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x400000000000000) 10:52:46 executing program 4: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x2000000000) 10:52:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:46 executing program 2: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x20800000) 10:52:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:46 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x500000000000000) [ 386.424708][T13645] input: syz1 as /devices/virtual/input/input275 10:52:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:47 executing program 5: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) write$uinput_user_dev(r3, &(0x7f0000000380)={'syz1\x00', {0x9, 0x20, 0x4, 0x4}, 0x32, [0x8, 0x8001, 0x3, 0x1, 0xccd, 0x0, 0x17, 0x7, 0x68, 0x200, 0x1, 0x6, 0xc0, 0xdd, 0x2, 0x91, 0x1f, 0x310, 0x5, 0x1, 0x7ff, 0x6, 0x1, 0x0, 0x0, 0x2, 0x3f, 0x48, 0x400, 0x1, 0x3d4, 0x10001, 0xffff, 0x728, 0x8, 0x62, 0x300, 0x6, 0x4, 0x0, 0x5, 0x5, 0x3ff, 0xfffffffb, 0xda3b, 0x80000001, 0x1ff, 0x2, 0x144, 0x6, 0x6, 0x0, 0xffffffff, 0x1, 0x1000, 0x8, 0xffff, 0x7, 0x4, 0x7ff, 0x16a, 0x5, 0x9, 0x9], [0x5, 0x84, 0x8, 0x0, 0x2, 0x7ff, 0x8, 0x5, 0x5a15, 0xfbc, 0xfaf523b6, 0xb12, 0x7c1, 0x5, 0x4, 0x8, 0xfffff800, 0x1, 0x0, 0x8001, 0xfffffffb, 0x200, 0x3, 0xfffffffc, 0x6, 0x3ff, 0x0, 0x3ff, 0x3, 0x5, 0x808, 0x2, 0x0, 0x7fffffff, 0x8, 0x6, 0x1, 0x401, 0x4, 0x9, 0x9, 0x0, 0x89d, 0x2, 0x0, 0x7ff, 0x5, 0x1000, 0x5, 0x3, 0x5, 0xa2d1, 0x7ff, 0x8, 0x1, 0xff, 0x6, 0x4, 0x1, 0x401, 0x6, 0x9d31, 0x6, 0x3], [0xadaf, 0x7fffffff, 0x1, 0x2, 0x0, 0x7, 0xfff, 0xcb35, 0x6, 0x4, 0x1ff, 0x60, 0x7, 0x5, 0x3, 0x80000000, 0xac54, 0x2, 0x6, 0x401, 0x8, 0x18f, 0x40, 0x0, 0xe6b, 0xd54, 0x6, 0x1, 0x3, 0x2, 0x3, 0x4, 0xffff, 0x100, 0x1f, 0x2, 0x8, 0xa27c, 0x3, 0x0, 0x8, 0x82, 0x9, 0x7d73, 0x7, 0x8, 0x56, 0x3f, 0xb92, 0x3, 0x697, 0x1, 0x0, 0x2e62, 0xfff, 0x1, 0x78, 0x20, 0x122, 0x80000000, 0x1, 0x4, 0x0, 0x628], [0xffff, 0x1ec, 0x800, 0x6, 0x2, 0x0, 0x7eae, 0xdf1, 0xffff, 0x6, 0x0, 0x3, 0x9, 0x0, 0x8f, 0x48, 0x6, 0x8, 0x4, 0x5ab7, 0x7, 0x1, 0x6be, 0x8001, 0x0, 0xb79, 0x8000, 0x4, 0x3, 0x1f, 0x5, 0x9, 0x8, 0xfffffffc, 0x7, 0x3ff, 0x2, 0xb37, 0xd495, 0x9, 0x5, 0xd6, 0x0, 0x3, 0x18de, 0x2, 0x3, 0x4, 0x5, 0x400, 0xffff, 0x1000, 0xff, 0x0, 0x4f, 0x7, 0x0, 0x10001, 0x80000, 0x7, 0x5a44, 0x2023, 0x3, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x8000}}, './file0\x00'}) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x3ff, 0x1000, 0x800, 0x3}, 'syz1\x00', 0x1a}) signalfd(r4, &(0x7f0000000080)={[0x100000001]}, 0x8) 10:52:47 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x600000000000000) 10:52:47 executing program 2: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x500000000000000) 10:52:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 1) 10:52:47 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 10:52:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 387.012928][T13667] input: syz1 as /devices/virtual/input/input280 10:52:47 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x700000000000000) 10:52:47 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 387.061576][T13671] input: syz1 as /devices/virtual/input/input281 [ 387.097291][T13670] FAULT_INJECTION: forcing a failure. [ 387.097291][T13670] name failslab, interval 1, probability 0, space 0, times 0 10:52:47 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x900000000000000) [ 387.205905][T13670] CPU: 0 PID: 13670 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 387.216460][T13670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.226530][T13670] Call Trace: [ 387.229817][T13670] [ 387.232756][T13670] dump_stack_lvl+0xcd/0x134 [ 387.237372][T13670] should_fail.cold+0x5/0xa [ 387.241896][T13670] ? tomoyo_realpath_from_path+0xc3/0x620 [ 387.247648][T13670] should_failslab+0x5/0x10 [ 387.252176][T13670] __kmalloc+0x72/0x450 [ 387.256359][T13670] tomoyo_realpath_from_path+0xc3/0x620 [ 387.261929][T13670] ? tomoyo_profile+0x42/0x50 [ 387.266631][T13670] tomoyo_path_number_perm+0x1d5/0x590 [ 387.272107][T13670] ? tomoyo_path_number_perm+0x18d/0x590 [ 387.277766][T13670] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 387.283592][T13670] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 387.289632][T13670] ? __context_tracking_exit+0xb8/0xe0 [ 387.295126][T13670] ? __fget_files+0x28c/0x470 [ 387.299827][T13670] security_file_ioctl+0x50/0xb0 [ 387.304803][T13670] __x64_sys_ioctl+0xb3/0x200 [ 387.309502][T13670] do_syscall_64+0x35/0xb0 [ 387.313938][T13670] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 387.319851][T13670] RIP: 0033:0x7f4825f54059 [ 387.324282][T13670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 387.343911][T13670] RSP: 002b:00007f48248a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.352344][T13670] RAX: ffffffffffffffda RBX: 00007f4826067030 RCX: 00007f4825f54059 [ 387.360327][T13670] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 387.368307][T13670] RBP: 00007f48248a81d0 R08: 0000000000000000 R09: 0000000000000000 [ 387.376290][T13670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.384269][T13670] R13: 00007f482659ab1f R14: 00007f48248a8300 R15: 0000000000022000 [ 387.392270][T13670] 10:52:47 executing program 2: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x700000000000000) 10:52:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 387.465100][T13670] ERROR: Out of memory at tomoyo_realpath_from_path. 10:52:47 executing program 5: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) write$uinput_user_dev(r3, &(0x7f0000000380)={'syz1\x00', {0x9, 0x20, 0x4, 0x4}, 0x32, [0x8, 0x8001, 0x3, 0x1, 0xccd, 0x0, 0x17, 0x7, 0x68, 0x200, 0x1, 0x6, 0xc0, 0xdd, 0x2, 0x91, 0x1f, 0x310, 0x5, 0x1, 0x7ff, 0x6, 0x1, 0x0, 0x0, 0x2, 0x3f, 0x48, 0x400, 0x1, 0x3d4, 0x10001, 0xffff, 0x728, 0x8, 0x62, 0x300, 0x6, 0x4, 0x0, 0x5, 0x5, 0x3ff, 0xfffffffb, 0xda3b, 0x80000001, 0x1ff, 0x2, 0x144, 0x6, 0x6, 0x0, 0xffffffff, 0x1, 0x1000, 0x8, 0xffff, 0x7, 0x4, 0x7ff, 0x16a, 0x5, 0x9, 0x9], [0x5, 0x84, 0x8, 0x0, 0x2, 0x7ff, 0x8, 0x5, 0x5a15, 0xfbc, 0xfaf523b6, 0xb12, 0x7c1, 0x5, 0x4, 0x8, 0xfffff800, 0x1, 0x0, 0x8001, 0xfffffffb, 0x200, 0x3, 0xfffffffc, 0x6, 0x3ff, 0x0, 0x3ff, 0x3, 0x5, 0x808, 0x2, 0x0, 0x7fffffff, 0x8, 0x6, 0x1, 0x401, 0x4, 0x9, 0x9, 0x0, 0x89d, 0x2, 0x0, 0x7ff, 0x5, 0x1000, 0x5, 0x3, 0x5, 0xa2d1, 0x7ff, 0x8, 0x1, 0xff, 0x6, 0x4, 0x1, 0x401, 0x6, 0x9d31, 0x6, 0x3], [0xadaf, 0x7fffffff, 0x1, 0x2, 0x0, 0x7, 0xfff, 0xcb35, 0x6, 0x4, 0x1ff, 0x60, 0x7, 0x5, 0x3, 0x80000000, 0xac54, 0x2, 0x6, 0x401, 0x8, 0x18f, 0x40, 0x0, 0xe6b, 0xd54, 0x6, 0x1, 0x3, 0x2, 0x3, 0x4, 0xffff, 0x100, 0x1f, 0x2, 0x8, 0xa27c, 0x3, 0x0, 0x8, 0x82, 0x9, 0x7d73, 0x7, 0x8, 0x56, 0x3f, 0xb92, 0x3, 0x697, 0x1, 0x0, 0x2e62, 0xfff, 0x1, 0x78, 0x20, 0x122, 0x80000000, 0x1, 0x4, 0x0, 0x628], [0xffff, 0x1ec, 0x800, 0x6, 0x2, 0x0, 0x7eae, 0xdf1, 0xffff, 0x6, 0x0, 0x3, 0x9, 0x0, 0x8f, 0x48, 0x6, 0x8, 0x4, 0x5ab7, 0x7, 0x1, 0x6be, 0x8001, 0x0, 0xb79, 0x8000, 0x4, 0x3, 0x1f, 0x5, 0x9, 0x8, 0xfffffffc, 0x7, 0x3ff, 0x2, 0xb37, 0xd495, 0x9, 0x5, 0xd6, 0x0, 0x3, 0x18de, 0x2, 0x3, 0x4, 0x5, 0x400, 0xffff, 0x1000, 0xff, 0x0, 0x4f, 0x7, 0x0, 0x10001, 0x80000, 0x7, 0x5a44, 0x2023, 0x3, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x8000}}, './file0\x00'}) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x3ff, 0x1000, 0x800, 0x3}, 'syz1\x00', 0x1a}) (async) signalfd(r4, &(0x7f0000000080)={[0x100000001]}, 0x8) 10:52:47 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 10:52:47 executing program 2: syz_usb_connect(0x4, 0x7a, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x44, 0xfb, 0x9, 0x40, 0x1803, 0x5510, 0x904f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x0, 0x0, 0x0, 0xfd, [{{0x9, 0x4, 0x96, 0x1, 0x0, 0x57, 0xba, 0xe4, 0x0, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'r'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xfff, 0xc879, 0x2}, {0x6, 0x24, 0x1a, 0x1885, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0x1522, 0xc42, 0x7, 0x81, 0x1, 0xff}, @mdlm={0x15, 0x24, 0x12, 0x1}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x80, 0x2}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x531, 0x445b}]}]}}]}}]}}, 0x0) 10:52:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 2) 10:52:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:47 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0xa00000000000000) [ 387.748652][T13699] input: syz1 as /devices/virtual/input/input286 [ 387.761400][T13699] FAULT_INJECTION: forcing a failure. [ 387.761400][T13699] name failslab, interval 1, probability 0, space 0, times 0 [ 387.776905][T13699] CPU: 1 PID: 13699 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 387.787450][T13699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.797530][T13699] Call Trace: [ 387.800826][T13699] [ 387.803774][T13699] dump_stack_lvl+0xcd/0x134 [ 387.808402][T13699] should_fail.cold+0x5/0xa [ 387.812932][T13699] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 387.818326][T13699] should_failslab+0x5/0x10 [ 387.822863][T13699] __kmalloc+0x72/0x450 [ 387.827055][T13699] tomoyo_encode2.part.0+0xe9/0x3a0 [ 387.832288][T13699] tomoyo_encode+0x28/0x50 [ 387.836731][T13699] tomoyo_realpath_from_path+0x186/0x620 [ 387.842401][T13699] tomoyo_path_number_perm+0x1d5/0x590 [ 387.847880][T13699] ? tomoyo_path_number_perm+0x18d/0x590 [ 387.853543][T13699] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 387.859379][T13699] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 387.865420][T13699] ? __context_tracking_exit+0xb8/0xe0 [ 387.871003][T13699] ? __fget_files+0x28c/0x470 [ 387.875695][T13699] security_file_ioctl+0x50/0xb0 [ 387.880649][T13699] __x64_sys_ioctl+0xb3/0x200 [ 387.885341][T13699] do_syscall_64+0x35/0xb0 [ 387.889766][T13699] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 387.895664][T13699] RIP: 0033:0x7f4825f54059 [ 387.900105][T13699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 387.919756][T13699] RSP: 002b:00007f48248c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.928172][T13699] RAX: ffffffffffffffda RBX: 00007f4826066f60 RCX: 00007f4825f54059 [ 387.936155][T13699] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 10:52:48 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:48 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4800000000000000) [ 387.944125][T13699] RBP: 00007f48248c91d0 R08: 0000000000000000 R09: 0000000000000000 [ 387.952095][T13699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.960060][T13699] R13: 00007f482659ab1f R14: 00007f48248c9300 R15: 0000000000022000 [ 387.968047][T13699] 10:52:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:48 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 388.188834][T13699] ERROR: Out of memory at tomoyo_realpath_from_path. 10:52:48 executing program 5: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$uinput_user_dev(r3, &(0x7f0000000380)={'syz1\x00', {0x9, 0x20, 0x4, 0x4}, 0x32, [0x8, 0x8001, 0x3, 0x1, 0xccd, 0x0, 0x17, 0x7, 0x68, 0x200, 0x1, 0x6, 0xc0, 0xdd, 0x2, 0x91, 0x1f, 0x310, 0x5, 0x1, 0x7ff, 0x6, 0x1, 0x0, 0x0, 0x2, 0x3f, 0x48, 0x400, 0x1, 0x3d4, 0x10001, 0xffff, 0x728, 0x8, 0x62, 0x300, 0x6, 0x4, 0x0, 0x5, 0x5, 0x3ff, 0xfffffffb, 0xda3b, 0x80000001, 0x1ff, 0x2, 0x144, 0x6, 0x6, 0x0, 0xffffffff, 0x1, 0x1000, 0x8, 0xffff, 0x7, 0x4, 0x7ff, 0x16a, 0x5, 0x9, 0x9], [0x5, 0x84, 0x8, 0x0, 0x2, 0x7ff, 0x8, 0x5, 0x5a15, 0xfbc, 0xfaf523b6, 0xb12, 0x7c1, 0x5, 0x4, 0x8, 0xfffff800, 0x1, 0x0, 0x8001, 0xfffffffb, 0x200, 0x3, 0xfffffffc, 0x6, 0x3ff, 0x0, 0x3ff, 0x3, 0x5, 0x808, 0x2, 0x0, 0x7fffffff, 0x8, 0x6, 0x1, 0x401, 0x4, 0x9, 0x9, 0x0, 0x89d, 0x2, 0x0, 0x7ff, 0x5, 0x1000, 0x5, 0x3, 0x5, 0xa2d1, 0x7ff, 0x8, 0x1, 0xff, 0x6, 0x4, 0x1, 0x401, 0x6, 0x9d31, 0x6, 0x3], [0xadaf, 0x7fffffff, 0x1, 0x2, 0x0, 0x7, 0xfff, 0xcb35, 0x6, 0x4, 0x1ff, 0x60, 0x7, 0x5, 0x3, 0x80000000, 0xac54, 0x2, 0x6, 0x401, 0x8, 0x18f, 0x40, 0x0, 0xe6b, 0xd54, 0x6, 0x1, 0x3, 0x2, 0x3, 0x4, 0xffff, 0x100, 0x1f, 0x2, 0x8, 0xa27c, 0x3, 0x0, 0x8, 0x82, 0x9, 0x7d73, 0x7, 0x8, 0x56, 0x3f, 0xb92, 0x3, 0x697, 0x1, 0x0, 0x2e62, 0xfff, 0x1, 0x78, 0x20, 0x122, 0x80000000, 0x1, 0x4, 0x0, 0x628], [0xffff, 0x1ec, 0x800, 0x6, 0x2, 0x0, 0x7eae, 0xdf1, 0xffff, 0x6, 0x0, 0x3, 0x9, 0x0, 0x8f, 0x48, 0x6, 0x8, 0x4, 0x5ab7, 0x7, 0x1, 0x6be, 0x8001, 0x0, 0xb79, 0x8000, 0x4, 0x3, 0x1f, 0x5, 0x9, 0x8, 0xfffffffc, 0x7, 0x3ff, 0x2, 0xb37, 0xd495, 0x9, 0x5, 0xd6, 0x0, 0x3, 0x18de, 0x2, 0x3, 0x4, 0x5, 0x400, 0xffff, 0x1000, 0xff, 0x0, 0x4f, 0x7, 0x0, 0x10001, 0x80000, 0x7, 0x5a44, 0x2023, 0x3, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async, rerun: 32) r4 = socket$inet6(0xa, 0x3, 0x6) (rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x8000}}, './file0\x00'}) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x3ff, 0x1000, 0x800, 0x3}, 'syz1\x00', 0x1a}) signalfd(r4, &(0x7f0000000080)={[0x100000001]}, 0x8) 10:52:48 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x4c00000000000000) 10:52:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:48 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:48 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 3) 10:52:48 executing program 2: syz_usb_connect(0x4, 0x7a, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x44, 0xfb, 0x9, 0x40, 0x1803, 0x5510, 0x904f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x0, 0x0, 0x0, 0xfd, [{{0x9, 0x4, 0x96, 0x1, 0x0, 0x57, 0xba, 0xe4, 0x0, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'r'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xfff, 0xc879, 0x2}, {0x6, 0x24, 0x1a, 0x1885, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0x1522, 0xc42, 0x7, 0x81, 0x1, 0xff}, @mdlm={0x15, 0x24, 0x12, 0x1}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x80, 0x2}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x531, 0x445b}]}]}}]}}]}}, 0x0) syz_usb_connect(0x4, 0x7a, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x44, 0xfb, 0x9, 0x40, 0x1803, 0x5510, 0x904f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x0, 0x0, 0x0, 0xfd, [{{0x9, 0x4, 0x96, 0x1, 0x0, 0x57, 0xba, 0xe4, 0x0, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'r'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xfff, 0xc879, 0x2}, {0x6, 0x24, 0x1a, 0x1885, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0x1522, 0xc42, 0x7, 0x81, 0x1, 0xff}, @mdlm={0x15, 0x24, 0x12, 0x1}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x80, 0x2}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x531, 0x445b}]}]}}]}}]}}, 0x0) (async) 10:52:48 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 388.565124][T13722] input: syz1 as /devices/virtual/input/input291 [ 388.597612][T13722] FAULT_INJECTION: forcing a failure. [ 388.597612][T13722] name failslab, interval 1, probability 0, space 0, times 0 10:52:48 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x6800000000000000) 10:52:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 388.625044][T13727] input: syz1 as /devices/virtual/input/input292 [ 388.655920][T13722] CPU: 0 PID: 13722 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 388.666473][T13722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.676545][T13722] Call Trace: [ 388.679838][T13722] [ 388.682782][T13722] dump_stack_lvl+0xcd/0x134 [ 388.687446][T13722] should_fail.cold+0x5/0xa [ 388.691979][T13722] should_failslab+0x5/0x10 [ 388.696519][T13722] __kmalloc_track_caller+0x79/0x430 [ 388.701853][T13722] ? kasprintf+0xbb/0xf0 [ 388.706183][T13722] ? mark_lock.part.0+0xee/0x1910 [ 388.711238][T13722] kvasprintf+0xb5/0x150 [ 388.715505][T13722] ? bust_spinlocks+0xe0/0xe0 [ 388.720206][T13722] ? __lock_acquire+0x1666/0x56c0 [ 388.725270][T13722] kasprintf+0xbb/0xf0 [ 388.729362][T13722] ? kvasprintf_const+0x190/0x190 [ 388.734433][T13722] ? input_match_device_id+0x790/0x790 [ 388.739993][T13722] device_get_devnode+0x154/0x2b0 [ 388.745090][T13722] devtmpfs_delete_node+0xae/0x150 [ 388.750254][T13722] ? devtmpfs_create_node+0x210/0x210 [ 388.755649][T13722] ? find_held_lock+0x2d/0x110 [ 388.760450][T13722] ? klist_put+0x159/0x1d0 [ 388.764991][T13722] ? lock_downgrade+0x6e0/0x6e0 [ 388.769875][T13722] ? do_raw_spin_unlock+0x171/0x230 [ 388.775105][T13722] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 388.781377][T13722] ? kobject_put+0xb9/0x540 [ 388.785902][T13722] ? device_link_release_fn+0xc0/0xc0 [ 388.791298][T13722] ? klist_children_put+0x41/0x50 [ 388.796339][T13722] ? klist_put+0x169/0x1d0 [ 388.800774][T13722] device_del+0x93e/0xc80 [ 388.805131][T13722] ? __device_link_del+0x380/0x380 [ 388.810275][T13722] ? mark_held_locks+0x9f/0xe0 [ 388.815075][T13722] cdev_device_del+0x19/0x100 [ 388.819778][T13722] joydev_disconnect+0x3d/0xb0 [ 388.824565][T13722] __input_unregister_device+0x206/0x470 [ 388.830227][T13722] input_unregister_device+0xb4/0xf0 [ 388.835554][T13722] uinput_destroy_device+0x1f4/0x260 [ 388.840961][T13722] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 388.846890][T13722] ? uinput_write+0x11e0/0x11e0 [ 388.851777][T13722] ? __context_tracking_exit+0xb8/0xe0 [ 388.857271][T13722] ? __fget_files+0x28c/0x470 [ 388.861978][T13722] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 388.868242][T13722] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 388.874427][T13722] __x64_sys_ioctl+0x193/0x200 [ 388.879213][T13722] do_syscall_64+0x35/0xb0 [ 388.883646][T13722] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 388.889558][T13722] RIP: 0033:0x7f4825f54059 [ 388.893991][T13722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 388.913622][T13722] RSP: 002b:00007f48248c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 10:52:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 388.922057][T13722] RAX: ffffffffffffffda RBX: 00007f4826066f60 RCX: 00007f4825f54059 [ 388.930042][T13722] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 388.938023][T13722] RBP: 00007f48248c91d0 R08: 0000000000000000 R09: 0000000000000000 [ 388.946007][T13722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.953990][T13722] R13: 00007f482659ab1f R14: 00007f48248c9300 R15: 0000000000022000 [ 388.961997][T13722] 10:52:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:49 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) write(0xffffffffffffffff, &(0x7f0000000080)="5777bdbd2c0d1accf864471d2a24ad1ab4f556e0b5de0f12f876faf981e87b8fd366bc241ea6dadb967d7d1ee194dfe6615e131d7e91e53425d34696f746f1f0529545b8ee6b77bc6b811c45a5a05c76e2e34142902db8427f976a5ea2a8f8bed9a9518be86af400714706b19e98ce09f874fedc88c05cbf08fc893c1412a7684ce9ef7d2ffb9964bce41f85ba5b7f1e2e3bfa24bad3593eb52fe9719196eec6617c548bde6a659b32aa4cb00e52db20f85900bd00cfd1de7d668ac3aa3c5a40e7abcef9945a633030cd5cd2044dbfa11f", 0xd1) 10:52:49 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x6c00000000000000) 10:52:49 executing program 2: syz_usb_connect(0x4, 0x7a, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x44, 0xfb, 0x9, 0x40, 0x1803, 0x5510, 0x904f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x0, 0x0, 0x0, 0xfd, [{{0x9, 0x4, 0x96, 0x1, 0x0, 0x57, 0xba, 0xe4, 0x0, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'r'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xfff, 0xc879, 0x2}, {0x6, 0x24, 0x1a, 0x1885, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0x1522, 0xc42, 0x7, 0x81, 0x1, 0xff}, @mdlm={0x15, 0x24, 0x12, 0x1}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x80, 0x2}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x531, 0x445b}]}]}}]}}]}}, 0x0) 10:52:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 4) 10:52:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 389.128483][T13746] input: syz1 as /devices/virtual/input/input298 [ 389.153839][T13751] input: syz1 as /devices/virtual/input/input299 10:52:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:49 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x7400000000000000) [ 389.212669][T13753] input: syz1 as /devices/virtual/input/input300 [ 389.250993][T13753] FAULT_INJECTION: forcing a failure. 10:52:49 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) write(0xffffffffffffffff, &(0x7f0000000080)="5777bdbd2c0d1accf864471d2a24ad1ab4f556e0b5de0f12f876faf981e87b8fd366bc241ea6dadb967d7d1ee194dfe6615e131d7e91e53425d34696f746f1f0529545b8ee6b77bc6b811c45a5a05c76e2e34142902db8427f976a5ea2a8f8bed9a9518be86af400714706b19e98ce09f874fedc88c05cbf08fc893c1412a7684ce9ef7d2ffb9964bce41f85ba5b7f1e2e3bfa24bad3593eb52fe9719196eec6617c548bde6a659b32aa4cb00e52db20f85900bd00cfd1de7d668ac3aa3c5a40e7abcef9945a633030cd5cd2044dbfa11f", 0xd1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) write(0xffffffffffffffff, &(0x7f0000000080)="5777bdbd2c0d1accf864471d2a24ad1ab4f556e0b5de0f12f876faf981e87b8fd366bc241ea6dadb967d7d1ee194dfe6615e131d7e91e53425d34696f746f1f0529545b8ee6b77bc6b811c45a5a05c76e2e34142902db8427f976a5ea2a8f8bed9a9518be86af400714706b19e98ce09f874fedc88c05cbf08fc893c1412a7684ce9ef7d2ffb9964bce41f85ba5b7f1e2e3bfa24bad3593eb52fe9719196eec6617c548bde6a659b32aa4cb00e52db20f85900bd00cfd1de7d668ac3aa3c5a40e7abcef9945a633030cd5cd2044dbfa11f", 0xd1) (async) [ 389.250993][T13753] name failslab, interval 1, probability 0, space 0, times 0 [ 389.286798][T13760] input: syz1 as /devices/virtual/input/input302 [ 389.299668][T13753] CPU: 1 PID: 13753 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 389.310207][T13753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.320279][T13753] Call Trace: [ 389.323572][T13753] [ 389.326512][T13753] dump_stack_lvl+0xcd/0x134 [ 389.331118][T13753] should_fail.cold+0x5/0xa [ 389.335637][T13753] ? kobject_uevent_env+0x235/0x1600 [ 389.340949][T13753] should_failslab+0x5/0x10 [ 389.345475][T13753] kmem_cache_alloc_trace+0x55/0x3d0 [ 389.350792][T13753] ? dev_uevent_filter+0xd0/0xd0 [ 389.355750][T13753] kobject_uevent_env+0x235/0x1600 [ 389.360896][T13753] ? dev_fwnode+0x79/0x90 [ 389.365320][T13753] device_del+0x7f1/0xc80 [ 389.369686][T13753] ? __device_link_del+0x380/0x380 [ 389.374831][T13753] ? mark_held_locks+0x9f/0xe0 [ 389.379632][T13753] cdev_device_del+0x19/0x100 [ 389.384333][T13753] joydev_disconnect+0x3d/0xb0 [ 389.389120][T13753] __input_unregister_device+0x206/0x470 [ 389.394781][T13753] input_unregister_device+0xb4/0xf0 [ 389.400092][T13753] uinput_destroy_device+0x1f4/0x260 [ 389.405414][T13753] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 389.411336][T13753] ? uinput_write+0x11e0/0x11e0 [ 389.416212][T13753] ? __context_tracking_exit+0xb8/0xe0 [ 389.421705][T13753] ? __fget_files+0x28c/0x470 [ 389.426413][T13753] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 389.432681][T13753] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 389.438865][T13753] __x64_sys_ioctl+0x193/0x200 [ 389.441533][T13757] input: syz1 as /devices/virtual/input/input303 [ 389.443741][T13753] do_syscall_64+0x35/0xb0 [ 389.454511][T13753] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 389.460445][T13753] RIP: 0033:0x7f4825f54059 [ 389.464873][T13753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 10:52:49 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x7a00000000000000) 10:52:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 389.484501][T13753] RSP: 002b:00007f48248c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.492942][T13753] RAX: ffffffffffffffda RBX: 00007f4826066f60 RCX: 00007f4825f54059 [ 389.500939][T13753] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 389.508934][T13753] RBP: 00007f48248c91d0 R08: 0000000000000000 R09: 0000000000000000 [ 389.516922][T13753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.524905][T13753] R13: 00007f482659ab1f R14: 00007f48248c9300 R15: 0000000000022000 [ 389.532911][T13753] 10:52:49 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) write(0xffffffffffffffff, &(0x7f0000000080)="5777bdbd2c0d1accf864471d2a24ad1ab4f556e0b5de0f12f876faf981e87b8fd366bc241ea6dadb967d7d1ee194dfe6615e131d7e91e53425d34696f746f1f0529545b8ee6b77bc6b811c45a5a05c76e2e34142902db8427f976a5ea2a8f8bed9a9518be86af400714706b19e98ce09f874fedc88c05cbf08fc893c1412a7684ce9ef7d2ffb9964bce41f85ba5b7f1e2e3bfa24bad3593eb52fe9719196eec6617c548bde6a659b32aa4cb00e52db20f85900bd00cfd1de7d668ac3aa3c5a40e7abcef9945a633030cd5cd2044dbfa11f", 0xd1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) write(0xffffffffffffffff, &(0x7f0000000080)="5777bdbd2c0d1accf864471d2a24ad1ab4f556e0b5de0f12f876faf981e87b8fd366bc241ea6dadb967d7d1ee194dfe6615e131d7e91e53425d34696f746f1f0529545b8ee6b77bc6b811c45a5a05c76e2e34142902db8427f976a5ea2a8f8bed9a9518be86af400714706b19e98ce09f874fedc88c05cbf08fc893c1412a7684ce9ef7d2ffb9964bce41f85ba5b7f1e2e3bfa24bad3593eb52fe9719196eec6617c548bde6a659b32aa4cb00e52db20f85900bd00cfd1de7d668ac3aa3c5a40e7abcef9945a633030cd5cd2044dbfa11f", 0xd1) (async) 10:52:49 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0xffffffff00000000) 10:52:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:49 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 10:52:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 5) 10:52:49 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 389.705996][T13780] input: syz1 as /devices/virtual/input/input305 10:52:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 389.759245][T13788] input: syz1 as /devices/virtual/input/input308 [ 389.766806][T13786] input: syz1 as /devices/virtual/input/input307 [ 389.787220][T13787] input: syz1 as /devices/virtual/input/input309 [ 389.803278][T13786] FAULT_INJECTION: forcing a failure. 10:52:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 389.803278][T13786] name failslab, interval 1, probability 0, space 0, times 0 [ 389.850407][T13786] CPU: 1 PID: 13786 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 389.860959][T13786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.871033][T13786] Call Trace: [ 389.874323][T13786] [ 389.877272][T13786] dump_stack_lvl+0xcd/0x134 [ 389.881892][T13786] should_fail.cold+0x5/0xa [ 389.886427][T13786] ? kobject_get_path+0xbe/0x230 [ 389.891390][T13786] should_failslab+0x5/0x10 [ 389.895924][T13786] __kmalloc+0x72/0x450 [ 389.900113][T13786] kobject_get_path+0xbe/0x230 [ 389.904914][T13786] kobject_uevent_env+0x259/0x1600 [ 389.910062][T13786] ? dev_fwnode+0x79/0x90 [ 389.914417][T13786] device_del+0x7f1/0xc80 [ 389.918763][T13786] ? __device_link_del+0x380/0x380 [ 389.923888][T13786] ? mark_held_locks+0x9f/0xe0 [ 389.928671][T13786] cdev_device_del+0x19/0x100 [ 389.933354][T13786] joydev_disconnect+0x3d/0xb0 [ 389.938126][T13786] __input_unregister_device+0x206/0x470 [ 389.943772][T13786] input_unregister_device+0xb4/0xf0 [ 389.949068][T13786] uinput_destroy_device+0x1f4/0x260 [ 389.954378][T13786] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 389.960293][T13786] ? uinput_write+0x11e0/0x11e0 [ 389.965163][T13786] ? __context_tracking_exit+0xb8/0xe0 [ 389.970648][T13786] ? __fget_files+0x28c/0x470 [ 389.975351][T13786] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 389.981610][T13786] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 389.987803][T13786] __x64_sys_ioctl+0x193/0x200 [ 389.992585][T13786] do_syscall_64+0x35/0xb0 [ 389.997014][T13786] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 390.002915][T13786] RIP: 0033:0x7f4825f54059 [ 390.007335][T13786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 390.026943][T13786] RSP: 002b:00007f48248c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.035365][T13786] RAX: ffffffffffffffda RBX: 00007f4826066f60 RCX: 00007f4825f54059 [ 390.043343][T13786] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 10:52:50 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) 10:52:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 390.051311][T13786] RBP: 00007f48248c91d0 R08: 0000000000000000 R09: 0000000000000000 [ 390.059279][T13786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.067250][T13786] R13: 00007f482659ab1f R14: 00007f48248c9300 R15: 0000000000022000 [ 390.075237][T13786] [ 390.107238][T13797] input: syz1 as /devices/virtual/input/input311 [ 390.145418][ T3672] usb 3-1: new high-speed USB device number 10 using dummy_hcd 10:52:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:50 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0xffffffff, 0x0, 0x1}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:50 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) 10:52:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 390.278140][T13809] input: syz1 as /devices/virtual/input/input313 [ 390.297995][T13813] input: syz1 as /devices/virtual/input/input315 [ 390.365485][ T3672] usb 3-1: device descriptor read/64, error 18 [ 390.635530][ T3672] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 390.825513][ T3672] usb 3-1: device descriptor read/64, error 18 [ 390.957029][ T3672] usb usb3-port1: attempt power cycle [ 391.375376][ T3672] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 391.575551][ T3672] usb 3-1: device descriptor read/8, error -61 [ 391.865462][ T3672] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 392.035547][ T3672] usb 3-1: device descriptor read/8, error -61 [ 392.165690][ T3672] usb usb3-port1: unable to enumerate USB device 10:52:52 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) (async) 10:52:52 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 6) 10:52:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:52 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) getsockname$packet(r2, &(0x7f0000000100), &(0x7f0000000140)=0x14) ptrace(0x10, r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) getpgrp(r1) syz_open_procfs(r3, &(0x7f0000000000)='fd/3\x00') 10:52:52 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0xffffffff, 0x0, 0x1}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 392.751307][T13819] input: syz1 as /devices/virtual/input/input316 [ 392.759243][T13824] input: syz1 as /devices/virtual/input/input317 [ 392.769371][T13822] input: syz1 as /devices/virtual/input/input318 [ 392.796327][T13827] input: syz1 as /devices/virtual/input/input319 10:52:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:53 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) getsockname$packet(r2, &(0x7f0000000100), &(0x7f0000000140)=0x14) ptrace(0x10, r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) getpgrp(r1) syz_open_procfs(r3, &(0x7f0000000000)='fd/3\x00') memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0xc) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) (async) getsockname$packet(r2, &(0x7f0000000100), &(0x7f0000000140)=0x14) (async) ptrace(0x10, r1) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) (async) getpgrp(r1) (async) syz_open_procfs(r3, &(0x7f0000000000)='fd/3\x00') (async) 10:52:53 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0xffffffff, 0x0, 0x1}}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 392.857037][T13827] FAULT_INJECTION: forcing a failure. [ 392.857037][T13827] name failslab, interval 1, probability 0, space 0, times 0 [ 392.934156][T13827] CPU: 1 PID: 13827 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 392.944704][T13827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.954781][T13827] Call Trace: [ 392.958079][T13827] [ 392.961023][T13827] dump_stack_lvl+0xcd/0x134 [ 392.965646][T13827] should_fail.cold+0x5/0xa [ 392.970185][T13827] should_failslab+0x5/0x10 [ 392.974720][T13827] __kmalloc_track_caller+0x79/0x430 [ 392.980034][T13827] ? kasprintf+0xbb/0xf0 [ 392.984311][T13827] kvasprintf+0xb5/0x150 [ 392.988182][T13839] input: syz1 as /devices/virtual/input/input322 [ 392.988578][T13827] ? bust_spinlocks+0xe0/0xe0 [ 392.995333][T13838] input: syz1 as /devices/virtual/input/input321 [ 392.999573][T13827] ? pointer+0xa00/0xa00 [ 392.999606][T13827] ? __input_unregister_device+0x206/0x470 [ 393.015942][T13827] ? input_unregister_device+0xb4/0xf0 [ 393.021415][T13827] ? uinput_destroy_device+0x1f4/0x260 [ 393.025916][T13834] input: syz1 as /devices/virtual/input/input320 [ 393.026871][T13827] ? uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 393.026917][T13827] kasprintf+0xbb/0xf0 [ 393.043360][T13827] ? kvasprintf_const+0x190/0x190 [ 393.048409][T13827] ? cleanup_uevent_env+0x40/0x40 [ 393.053458][T13827] ? pointer+0xa00/0xa00 [ 393.057723][T13827] ? kobject_get_path+0xbe/0x230 [ 393.062684][T13827] ? input_match_device_id+0x790/0x790 [ 393.068166][T13827] device_get_devnode+0x154/0x2b0 [ 393.073213][T13827] dev_uevent+0x41c/0x780 [ 393.077980][T13827] ? device_get_devnode+0x2b0/0x2b0 [ 393.083203][T13827] ? perf_trace_irq_matrix_cpu+0x690/0x950 [ 393.089028][T13827] ? memcpy+0x39/0x60 [ 393.093014][T13827] ? device_get_devnode+0x2b0/0x2b0 [ 393.098236][T13827] kobject_uevent_env+0x618/0x1600 [ 393.103380][T13827] ? dev_fwnode+0x79/0x90 [ 393.107738][T13827] device_del+0x7f1/0xc80 [ 393.112091][T13827] ? __device_link_del+0x380/0x380 [ 393.117238][T13827] ? mark_held_locks+0x9f/0xe0 [ 393.122021][T13827] cdev_device_del+0x19/0x100 [ 393.126699][T13827] joydev_disconnect+0x3d/0xb0 [ 393.131488][T13827] __input_unregister_device+0x206/0x470 [ 393.137151][T13827] input_unregister_device+0xb4/0xf0 [ 393.142458][T13827] uinput_destroy_device+0x1f4/0x260 [ 393.147773][T13827] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 393.153699][T13827] ? uinput_write+0x11e0/0x11e0 [ 393.158566][T13827] ? __context_tracking_exit+0xb8/0xe0 [ 393.164048][T13827] ? __fget_files+0x28c/0x470 [ 393.168732][T13827] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 393.174999][T13827] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 393.181184][T13827] __x64_sys_ioctl+0x193/0x200 [ 393.185974][T13827] do_syscall_64+0x35/0xb0 [ 393.190429][T13827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 393.196348][T13827] RIP: 0033:0x7f4825f54059 [ 393.200779][T13827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 393.220410][T13827] RSP: 002b:00007f48248c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 10:52:53 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) getsockname$packet(r2, &(0x7f0000000100), &(0x7f0000000140)=0x14) ptrace(0x10, r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) getpgrp(r1) syz_open_procfs(r3, &(0x7f0000000000)='fd/3\x00') memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0xc) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) (async) getsockname$packet(r2, &(0x7f0000000100), &(0x7f0000000140)=0x14) (async) ptrace(0x10, r1) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) (async) getpgrp(r1) (async) syz_open_procfs(r3, &(0x7f0000000000)='fd/3\x00') (async) [ 393.228848][T13827] RAX: ffffffffffffffda RBX: 00007f4826066f60 RCX: 00007f4825f54059 [ 393.236842][T13827] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 393.244838][T13827] RBP: 00007f48248c91d0 R08: 0000000000000000 R09: 0000000000000000 [ 393.252834][T13827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.260833][T13827] R13: 00007f482659ab1f R14: 00007f48248c9300 R15: 0000000000022000 [ 393.268836][T13827] 10:52:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 7) [ 393.401924][T13854] input: syz1 as /devices/virtual/input/input324 [ 393.425604][T13854] FAULT_INJECTION: forcing a failure. [ 393.425604][T13854] name failslab, interval 1, probability 0, space 0, times 0 [ 393.462568][T13854] CPU: 1 PID: 13854 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 393.473133][T13854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.483200][T13854] Call Trace: [ 393.486475][T13854] [ 393.489413][T13854] dump_stack_lvl+0xcd/0x134 [ 393.494033][T13854] should_fail.cold+0x5/0xa [ 393.498569][T13854] should_failslab+0x5/0x10 [ 393.503091][T13854] kmem_cache_alloc_node+0x65/0x4f0 [ 393.508315][T13854] ? __alloc_skb+0x215/0x340 [ 393.513051][T13854] __alloc_skb+0x215/0x340 [ 393.517493][T13854] alloc_uevent_skb+0x7b/0x210 [ 393.522456][T13854] kobject_uevent_env+0xadf/0x1600 [ 393.527585][T13854] ? dev_fwnode+0x79/0x90 [ 393.531924][T13854] device_del+0x7f1/0xc80 [ 393.536263][T13854] ? __device_link_del+0x380/0x380 [ 393.541383][T13854] ? mark_held_locks+0x9f/0xe0 [ 393.546160][T13854] cdev_device_del+0x19/0x100 [ 393.550842][T13854] joydev_disconnect+0x3d/0xb0 [ 393.555631][T13854] __input_unregister_device+0x206/0x470 [ 393.561400][T13854] input_unregister_device+0xb4/0xf0 [ 393.566712][T13854] uinput_destroy_device+0x1f4/0x260 [ 393.572017][T13854] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 393.577928][T13854] ? uinput_write+0x11e0/0x11e0 [ 393.582796][T13854] ? __context_tracking_exit+0xb8/0xe0 [ 393.588277][T13854] ? __fget_files+0x28c/0x470 [ 393.592968][T13854] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 393.599241][T13854] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 393.605429][T13854] __x64_sys_ioctl+0x193/0x200 [ 393.610208][T13854] do_syscall_64+0x35/0xb0 [ 393.614630][T13854] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 393.620532][T13854] RIP: 0033:0x7f4825f54059 [ 393.624950][T13854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 393.644559][T13854] RSP: 002b:00007f48248c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.652983][T13854] RAX: ffffffffffffffda RBX: 00007f4826066f60 RCX: 00007f4825f54059 [ 393.660970][T13854] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 393.668950][T13854] RBP: 00007f48248c91d0 R08: 0000000000000000 R09: 0000000000000000 [ 393.676924][T13854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.684897][T13854] R13: 00007f482659ab1f R14: 00007f48248c9300 R15: 0000000000022000 [ 393.692891][T13854] [ 393.775327][ T3672] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 393.975376][ T3672] usb 3-1: device descriptor read/64, error 18 [ 394.266458][ T3672] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 394.465394][ T3672] usb 3-1: device descriptor read/64, error 18 [ 394.587011][ T3672] usb usb3-port1: attempt power cycle [ 395.005332][ T3672] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 395.185458][ T3672] usb 3-1: device descriptor read/8, error -61 [ 395.455339][ T3672] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 395.655406][ T3672] usb 3-1: device descriptor read/8, error -61 10:52:56 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 10:52:56 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "490fc9794519af74", "b6d0d1788480c949077cc458f6cc8abd", '*KO8', "75b9bda5f0e2bb0c"}, 0x28) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x5, 0x35e4, 0x0, 0x1}, 0x10, [0x6, 0x10001, 0x1ff, 0x7e5d, 0x969, 0xe9cf, 0x8, 0x7, 0xba38, 0x8000, 0x0, 0x1f, 0x1, 0x5, 0x9, 0x7fffffff, 0x2, 0x2, 0x1000, 0x800, 0x200, 0x8, 0x754, 0x3bee, 0x3, 0x61e, 0x0, 0x1, 0xfff, 0x0, 0x3, 0xa47, 0x242, 0x2, 0x9, 0x7, 0x8, 0x2, 0x2, 0x9, 0x101, 0x0, 0x6, 0x4, 0x10001, 0x1, 0x8001, 0x10001, 0x6, 0x4, 0x6, 0x7f38, 0x8, 0x8, 0x3, 0x1, 0xb7, 0x3, 0x101, 0x0, 0xfa, 0x0, 0x6, 0x1], [0x8, 0x400, 0x7, 0x1, 0xeb22, 0x0, 0x2, 0xfffffffa, 0x7, 0x7, 0x7fffffff, 0x1, 0x7fff, 0xffffffff, 0x8, 0x81, 0x7, 0x0, 0x0, 0x2, 0x82, 0x80000001, 0x800000, 0x2, 0x8, 0x0, 0x1, 0xfffffffd, 0x2, 0x8, 0x8, 0xffff, 0x1, 0x7, 0xff49, 0x389, 0x80000001, 0x2a5831a6, 0x374c, 0x0, 0x2, 0x3, 0x32, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x0, 0x8, 0x0, 0x20, 0x7, 0x9, 0xa97a, 0x4, 0x20, 0x5, 0x9, 0x20, 0x1f, 0x4e8], [0x0, 0x1000, 0x5e, 0x1, 0x7ff, 0x40, 0x10000, 0x10001, 0x425f, 0x7fffffff, 0x80000001, 0x8, 0x8, 0x7, 0x3, 0x81, 0x0, 0x3, 0x7, 0x4, 0x1, 0x3f, 0x159, 0xab, 0x2, 0x4, 0x0, 0x0, 0x6, 0xf998, 0x2, 0x7, 0x100, 0x4, 0x8a0, 0x8, 0x5, 0xff, 0x2, 0x400000, 0x3ff, 0x0, 0x8, 0xfffffffb, 0x3, 0x7f2179c8, 0xd1f, 0x7b02, 0x3, 0xfffffff7, 0x1, 0x7, 0x8, 0x0, 0x40, 0x5, 0x8, 0x7ff, 0x9, 0x1, 0xc4c3, 0x7, 0x80, 0x1000], [0x8, 0xfffffedd, 0x4, 0x3, 0x1, 0x5, 0x3, 0x9, 0x7fffffff, 0x7, 0x10000, 0x7, 0x7f, 0x81, 0x99, 0x8001, 0x1000, 0x1, 0x7ff, 0x1, 0x1ff, 0xffffffff, 0x0, 0x9, 0x4, 0xf2, 0x5, 0xff, 0x3, 0x9, 0x0, 0x7, 0x3, 0x1f8, 0x2, 0x6, 0x3f, 0xd9c62689, 0x1, 0xc409, 0x3, 0x6, 0x100, 0x10000, 0x7, 0x7, 0x7ff, 0x4, 0x9, 0x4, 0xa8, 0x1, 0x3000, 0x1ff, 0x2f, 0xbe, 0x0, 0x8, 0x8, 0x8, 0x4, 0xdf, 0x1000, 0xffff8000]}, 0x45c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{0x4, 0x9, 0x401, 0x2ee1}, 'syz1\x00', 0x3f}) 10:52:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:56 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:56 executing program 3: write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)={{0xcc, 0x9, 0xef, 0x334, 0x217, 0x5, 0x1f, 0x5}, "ee8e2fa448776525a511229b02726f7bb799e4731ab5da6858c0d64b0b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa3d) r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) 10:52:56 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 8) [ 395.775932][ T3672] usb usb3-port1: unable to enumerate USB device 10:52:56 executing program 3: write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)={{0xcc, 0x9, 0xef, 0x334, 0x217, 0x5, 0x1f, 0x5}, "ee8e2fa448776525a511229b02726f7bb799e4731ab5da6858c0d64b0b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa3d) (async) r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') (rerun: 32) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 395.845538][T13868] input: syz1 as /devices/virtual/input/input325 [ 395.856574][T13871] input: syz1 as /devices/virtual/input/input326 [ 395.856658][T13872] input: syz1 as /devices/virtual/input/input327 [ 395.864796][T13875] input: syz1 as /devices/virtual/input/input328 [ 395.923708][T13878] FAULT_INJECTION: forcing a failure. [ 395.923708][T13878] name failslab, interval 1, probability 0, space 0, times 0 [ 395.972222][T13878] CPU: 1 PID: 13878 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 395.982772][T13878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.992855][T13878] Call Trace: [ 395.996151][T13878] [ 395.999102][T13878] dump_stack_lvl+0xcd/0x134 [ 396.003729][T13878] should_fail.cold+0x5/0xa [ 396.008265][T13878] should_failslab+0x5/0x10 [ 396.012800][T13878] __kmalloc_node_track_caller+0x7d/0x470 [ 396.018555][T13878] ? alloc_uevent_skb+0x7b/0x210 [ 396.023539][T13878] __alloc_skb+0xde/0x340 [ 396.027906][T13878] alloc_uevent_skb+0x7b/0x210 [ 396.032705][T13878] kobject_uevent_env+0xadf/0x1600 [ 396.037940][T13878] ? dev_fwnode+0x79/0x90 [ 396.042301][T13878] device_del+0x7f1/0xc80 [ 396.046669][T13878] ? __device_link_del+0x380/0x380 [ 396.051815][T13878] ? mark_held_locks+0x9f/0xe0 [ 396.056629][T13878] cdev_device_del+0x19/0x100 [ 396.061336][T13878] joydev_disconnect+0x3d/0xb0 [ 396.066136][T13878] __input_unregister_device+0x206/0x470 [ 396.071806][T13878] input_unregister_device+0xb4/0xf0 [ 396.077149][T13878] uinput_destroy_device+0x1f4/0x260 [ 396.082483][T13878] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 396.088433][T13878] ? uinput_write+0x11e0/0x11e0 [ 396.093329][T13878] ? __context_tracking_exit+0xb8/0xe0 [ 396.098841][T13878] ? __fget_files+0x28c/0x470 [ 396.103571][T13878] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 396.109854][T13878] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 396.116056][T13878] __x64_sys_ioctl+0x193/0x200 10:52:56 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:56 executing program 3: write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)={{0xcc, 0x9, 0xef, 0x334, 0x217, 0x5, 0x1f, 0x5}, "ee8e2fa448776525a511229b02726f7bb799e4731ab5da6858c0d64b0b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa3d) (async) r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) 10:52:56 executing program 3: r0 = memfd_create(&(0x7f0000000480)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13JF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[\x0f\x8fC/\x1a\x9dOt\xf08n\xef\x00\xf4\x05\x00\xd7]\xbf0\xe2\xe4y\x9f\xd1\x80\x1d@P\xdf\x129\xde\xf6\xf8{\x85*m%\xdd\\H\x82k\b\xf1\xaa\xe1\x9a\x91\x1b\x90:\xe5\xf7\xdc\x10;vi\xba\xd2\xf4\xbas\xf9\xe5\n\xaa{gB\n\x1aN(\xd4\x05j\x00\x00\x00\x00\x00\x00\x00\x00\xd55|\xc7\bbKa\xff2\xbb-\xf9\x86`\x1f\x7f\x12:\x12\xc2i\x189\x18q\x162\x1aD\x04Ai\xcef\x16v`3\xfcZ\x01\x00z\x1b\x8a8\x00\x00!\xba\x97\xbcX\xe1>\x8f8Sf\xfe\v\rpH\xad\xda\xee\x13\xae\xa1\xc1\xd0\xb1\x87\r:\xfed\x02@\x97\xd0\xdb\xf4\xb0\xf0\x1f\xc5\xd3)\x8147}\x8e\xb2\xf7c\xd97S(\xaeVD\xbb\xdc\xef\x99\x1e\x8f\xc4\xe6Q\xffF&O\xba\xa6Q\xa0\xda|\x92\xbdd\xa4\xb9]\xae*\xec\xa2\x1d\xce\x9c\x8c\xab-\xeeU\x1c\x00\xb6J\x02o\x8a\xdbF\x80<4g\x00'/351, 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000200), 0x4) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000003c0)=@multiplanar_userptr={0xffffffff, 0x9, 0x4, 0x10000, 0x3, {}, {0x2, 0x0, 0xff, 0x4, 0x1, 0x84, "d8c82be7"}, 0x4, 0x2, {&(0x7f0000000340)=[{0x2, 0x1f, {&(0x7f0000000240)}, 0x3}, {0x0, 0x1800000, {&(0x7f0000000280)}, 0x4}]}, 0x5, 0x0, r1}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x6}, 0x20) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000080)={0x0, 0x7fffffff, 0x3ff}) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f00000000c0)=0x8, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r2}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@empty, 0x80000100, 0x0, 0xff, 0xa, 0x2002, 0x8}, &(0x7f00000001c0)=0x20) sendmsg$tipc(r3, &(0x7f0000001680)={&(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x4, 0x2}}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000600)="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", 0x1000}], 0x1, &(0x7f0000001640)="fe78d5a75365f0204f6aafd75040d373e0b351bca1a848670eaab38b407b035900c4d543854a009cfdc71add62cd", 0x2e, 0x4000}, 0x9c009) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000)=0x5, 0x2) [ 396.120853][T13878] do_syscall_64+0x35/0xb0 [ 396.125292][T13878] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 396.131204][T13878] RIP: 0033:0x7f4825f54059 [ 396.135642][T13878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 396.143795][T13896] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 396.155268][T13878] RSP: 002b:00007f48248a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.155412][T13878] RAX: ffffffffffffffda RBX: 00007f4826067030 RCX: 00007f4825f54059 [ 396.155429][T13878] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 396.155445][T13878] RBP: 00007f48248a81d0 R08: 0000000000000000 R09: 0000000000000000 [ 396.155460][T13878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.155475][T13878] R13: 00007f482659ab1f R14: 00007f48248a8300 R15: 0000000000022000 [ 396.155508][T13878] [ 396.221306][T13888] input: syz1 as /devices/virtual/input/input329 10:52:56 executing program 3: r0 = memfd_create(&(0x7f0000000480)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13JF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[\x0f\x8fC/\x1a\x9dOt\xf08n\xef\x00\xf4\x05\x00\xd7]\xbf0\xe2\xe4y\x9f\xd1\x80\x1d@P\xdf\x129\xde\xf6\xf8{\x85*m%\xdd\\H\x82k\b\xf1\xaa\xe1\x9a\x91\x1b\x90:\xe5\xf7\xdc\x10;vi\xba\xd2\xf4\xbas\xf9\xe5\n\xaa{gB\n\x1aN(\xd4\x05j\x00\x00\x00\x00\x00\x00\x00\x00\xd55|\xc7\bbKa\xff2\xbb-\xf9\x86`\x1f\x7f\x12:\x12\xc2i\x189\x18q\x162\x1aD\x04Ai\xcef\x16v`3\xfcZ\x01\x00z\x1b\x8a8\x00\x00!\xba\x97\xbcX\xe1>\x8f8Sf\xfe\v\rpH\xad\xda\xee\x13\xae\xa1\xc1\xd0\xb1\x87\r:\xfed\x02@\x97\xd0\xdb\xf4\xb0\xf0\x1f\xc5\xd3)\x8147}\x8e\xb2\xf7c\xd97S(\xaeVD\xbb\xdc\xef\x99\x1e\x8f\xc4\xe6Q\xffF&O\xba\xa6Q\xa0\xda|\x92\xbdd\xa4\xb9]\xae*\xec\xa2\x1d\xce\x9c\x8c\xab-\xeeU\x1c\x00\xb6J\x02o\x8a\xdbF\x80<4g\x00'/351, 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000200), 0x4) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000003c0)=@multiplanar_userptr={0xffffffff, 0x9, 0x4, 0x10000, 0x3, {}, {0x2, 0x0, 0xff, 0x4, 0x1, 0x84, "d8c82be7"}, 0x4, 0x2, {&(0x7f0000000340)=[{0x2, 0x1f, {&(0x7f0000000240)}, 0x3}, {0x0, 0x1800000, {&(0x7f0000000280)}, 0x4}]}, 0x5, 0x0, r1}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x6}, 0x20) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000080)={0x0, 0x7fffffff, 0x3ff}) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) (async) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f00000000c0)=0x8, 0x4) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r2}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@empty, 0x80000100, 0x0, 0xff, 0xa, 0x2002, 0x8}, &(0x7f00000001c0)=0x20) sendmsg$tipc(r3, &(0x7f0000001680)={&(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x4, 0x2}}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000600)="44a6c58b81ccc5a79524f2efabbbf7009d97b1ac12cba7497c6345547ea64bf656c2b2a43f6c174b20558805ea6c52a80a69a54a2138ad5640fbed798574ae3213866a2f6a3a7e772e2a74201fa493ae1753e897bd067a73b192a9efc66f17fe1c9abb4238e1f5cb06767b14a59575c24d28d74511d18d5aa45628d3bbab31dd5a2c8a4f0f8bad3b61d1d7a1157ea1eb0ba623c2d91073b8952aad08342edb3c33f6b2046d4d7d26994de9946927893ec636f4cda8dbbd64c43bb90de26736c6195ab11bc7f7ce102b2727bf2d0e0db43d35b7521922bfd54cfc5cfb761a4703e509edfad20d9dcdb3fbda5e99d24de4845cc6670ce38abd46f184345ae9ac552304ff49160b13d40743ed14a88d627a70518f34129aec47e04ba99869ebf2c10bb93ad3bc20e18fafbb29197d00db8374e575aa0719a36b73cfaccdc1c65cecc7992e8b9b217fd3a66cfbf6941ca0951cce2cbccf45b6113492ce2d7ecdce7f5134218524683469c8cd935f39c8dea2d9621bf7769f88ab838b42a7166f8ca688a152946d3da4636ac1931a16e5ce0e67ef05a93d4cd4e1d271b508cb0ac200192f69455e355d5683141cefed2a41cb7c0eeb89deea2bf621434f0ebe8fc6cbe9ca7290de3b78b14237f7338392c8dcf148ea2a8e3a3f48f29324344ae6006fd4e0a5f95fbb42894e58d605bb3da1f2c0e7c819bd61e992d50ad5c994719b79cce1bbf54a829519d692043ae313c807a33c8b5e474a42890ba733a29f3d3fc77201771806620383e77e57c2d645adb39b837b9cfa10ff14a9157cdbaea3fbcc9a4aa464f12510b500b2799a19f1de7414d350982a1a34cca9c4a710ca8772e43ce259ae8995ec4c36268279e876cd6b1603e03450ccb2b0cd0e22110685bf35658b065a648eeba9000b902c14691897102eec74cd1b93e45f583b188ec417e294d11e6fe3bcc3030b4692d4ac5eb9d95301c7264cd8a80fe82c03e25e05285d663750246ad4b6316d9d58f4a4345114f4c00f84616c961c076a0ab3dfb57023087b98fab63c75a119c9353ab3ecd10b15f7a37e09d373d8b4fc610b34967ad5e973eb36663b8882dfbf9e3ef01eb061afc0ae63d108e65a5590a0e7a11adae26154575255155a6db0336661b1adf17dfd2954903bc5374f804479cedd1d4892bc887e4ea998ddb210837415aefc88802861b1b1477ce357a784e6d383c5470179141d66a33def3c1097d94f9d2c01e235cb176c4975ddcc97e0bfeb65db37d82550d69c54325b616bf627a011e108331bda360d7408f95f78add952f27056df303eb988954cef39515b4fcf342e5a34b0c08eeeb59acef896d97410a27bdd0a0d7586eb8f804270dc7b8c3cab3ca702c0812fc7c3f37f39bcb0446f6431dbdab646557dc206d001de9b842099adc3d7120d25d6468b1d4813ced2004475ecea3b7e3d01b46629f6ecd0eb4e367561f6e3d5fcca209232a9c62ecd5dceb7e99a2b22518d9f49b928914dc3237a6af6cb2b4b7fe68c945d4d01d467b147b11cc65ea322b44b7d4e86a85749350b7f10097a85a23caf932bb3bce54c098749755462e456fc33dc96b9eaacbecae74cccea3d047264b1e5c6fae3443a788dddf473e4ade41dcf4cf9c44aeea29530128ed25ca0edd1ad54470577e8d2d6430daea37dc03e283284bef911f147f243d0e56ab381d7e3a2ca1999fef86b1957a61296160a6f1783a1e6051f18525d8670e7f40eeeaad7b841300f7eff8d92c26a720c8dc6dc9355ae9c80454ddc59d87cc8eb08a2bb229955eb2f5919b313e5b08f57a9317d08920a8e288fa5a37f5ffe4f40ec02a589da5c751223efb34a535fd3c82e34f9679ed6c3a0461e2371921fcbdd5b3ba7b3fa3566c1939c00a2d8ea8dff47c345352202357616360f1a9d18bd31bd01222b88bf56028309627ecb8654fa7c65bb097837160a725b243d2738ab2515114828041a37eb4a8a9360e5c12f2d3f9457c87a0c53762d4aa5eb267e5af29d393e1fe2079c7a09c4bc80b378a44b5bdbee96698a065888ebfe80d2cc8dd7042f7185a416dc667ef8c5cbb78bd15e7fd1e77a2091062930d7480946588948622d76b88c606e7de5de03b838be490c44e48aff0a14a39c06a69f9f73ca9e8de6c4d4509c4e0d142d1ea0cfca2e5cf82ac22a516f888f3c8aa9e9e8413fe54018371f32a36102250204b645fa3d095db673ee35091dcd528eaf2c5e87fa6193495dfbbd5a1d0f80508b8d88a26dfa8124b0b969b9ca36445c18bc99509bc19f0c6c998cc1404b4945e93753908a03f8b0fb02d692b1b642d36f5798f42d7c38cf7930dc9baae1dc393fb9f3f411d2d748679ee771be43c8380ead0dcadc8c5a79bf7ae35cd759544b95fbed9d4344b895bfed899c318d44d152f9c8ffc4821ed0fd179e29943ec33ed5f486c94821efbb5b2ba4623bd0c6123dc3ad1784760f63f1369960e78cea6e6b50d5e63acc6ef6464b45048625b86c887434cac791a5ac32b6385351191a84d87ce2ac226e1b4d25ec07d55a481f067510e3a0af99107901a5cc1c89228d35f6c3418f54d5fc4a874ea3d38966213e55613cb6e131174b604aa6773a2d4c511c42efc9f907ef5a25f1506bf79d55ce2ce466056b590323e0d252bfa4fa8f5e102ba24ae0f26ad18a752c974f69dbeee8689752e0cbeffb5684dd3208c4da3286b9abf8c8f5aa6dc9e1ceb35e4a27fb5db14b12c0ef2e12ef1a991cd77fd66439b185f757dbd41ebff49de6924e708b5ab099065a7402b9b7eb7549f334114d34d1c54f54beff848c078fd63f9fb01e62121cbe756d3600048330bf99271a50a59ea86e47b1b5a3bab9b0a5b45eba3413567654412c6aa734652e4ca1002e7d290827ad6f12ed809bc91fc359a9a10683584faf39f9734abfab901db1c0c617cc40c86f720e18e2617cc65e22b352647dff099a199c372ac03fdb0441074c00410d9afbffed76fcd66055ba1bd733f2f0bbb6ba6787eeb32f758d9e790ccb736efcaf95616383c54d3142da4fe1853948f96ce12f200ba1f1bc188d9a756bdfa42e62d45b3d8262ea8c8efa005a52895fe540a6595c3e0868863cecc3df9bb289e654b90d4113decc59d464521bdcee21d30121b9f7e840b74cb5dd32db9359c3ae4024095325febc8e7d2700350781a5cdc6f3cb8d8d78b468a23ab71cd9efd755072d914cb59d9febf4ee02626028fdb36885fba12b741d9e1688ff09a94f3001f3b999f9c12a95be025fdae5d28177f207ec2f8ee2eb9839f2b4011ce777fb092297d028b5ce76640dcced77d204da79584ce581710a18fbdcadea0d21bdb553e5436687927e750644612afa74d47476d7618da59aa8b20eb3a7d3365c0c6fd367d82882d5139f364be7e698124084529c5f2e72dd846b1a4dcbfcdc167bfc8989c0b72b6a92ef9590a2f4bbb3c141e1e444057289e3ad9104c8274cac6fcb4eae3aad48b664f9b8f2338a18adc797efebbf131065f3b11e19795ee27aed1ac31de21423c972b5e4e305470dca7cc25a0020f0f94f7c829ac185ebda688e3a50c58ee876fa565a831b0185de1737a12368c71dbf5fa5b83808cc6ed8c699d983abc060cfbfea69bb85a9d76f940400c9074e2e9cb379150b07f593ec3307533c415caa2e126ff2270f3254b13b4a8a18c798050629b952a623a7f308c778a283e89ffe9a252cc3c9a0910ba54135142ba72670d02ec7e3a353e56259789edc9c2347737a263571d2d10c50753cdf64bf82a0d19bcd94be3054fca8adb0df804cc10f6d47543f013279707e4f41937a0523a25def552bd1ca99d1aa40bcf5cedbdde4327b6e5f43034c1f9f5b3f9c2a820815c19cfbe6da87576b3f558c1bc447844c2396d6b325f4f9685ae31bc2e687a54d021fc4ba2ecd727d7bb3ec6faa242e5b5e725c39081094c1e03e63c7737bf61eea277e62dc966fdfe02091a11df6dd7609309e2bff8c9c5be84ac7e86ddba464b8481077361f98b7856bc958b340ee11a1549a70079332072b9b6dd9d5192f0de937a7c7d89462c64f2da112a0914659e4bba4c8a5479425095430c52c0b08e440290f43cada52a09ab5f5713608e5402032fac485e5032dca35dbef90e48853d55665be6f6487d22938ed38e8875752c9866943f8ccfc42747bb28b58d899a690df516d3adedf647d9f0df6e660498a2af06dcb31152cc4cc1e15306ba63c6a89cc23216df6aa1f55fb67ae70915a309896af9a1c256f3e045295106e60a6b3be011b41ce72bff645705f184b70485c786db1b450be7066392e742d518f6934cee7560acb0cd9bc0d8cad2f1622b5a467a18b781bcec9f9f78de8299008b5f0876f2450491805fb3d6237e1ac8abdb88781bac55c1a25dfc44fe78bb3b361de0bf1d01d0ac9191ee1932aa8299aa81883e38e014af395e7a5676442360959631944615c01ad1302fdd0ee0a49d7cc68b3001479fe4f832a0f2fbaf53b3e5713ddd4ac10cf8cdb971afe3d2e2cd2403281e8c657e67e97db8364837750b0205c59f340bce91b74f04a3cf4540e40789741b50c1536db6feb09bfd422228e86ba5a59b7506e85fa8f1d44bcf1cd8eeeb0e4af0295f33e03fb9592dacc6ef2322bcb652b6ecb712217ebb531165d2f7014fb13401c7347e33d458604d91e6f13a54bce99837fe9901aa7f52343082e739baf3d46990d172c78174c29d8b11e387740628766ff733a094e83a9ac701555d9875d23494442805fde59251e6851d7c0d74c3ce993ce97a092b0bf92b0e20fc050672bd92d9e8afa5d455b9e2320b9923f01466b97b9d2760836088238147f6393b77060e99d09fb4dc5b95be5ed3c84b1c4784b9897070895d9876d36294ff9687744b3a40294063287d712485bdf2a6a28af9eec4845e6092477240996090518febbe5037d407e457a0220601624b9c151f9d7ef897b09a1fe310a2b08cfa7ec551d3d3672b2c5c4f8334dd656e1c3074a6d72f97a112d3382cac353c545fcb235a9233bc8b396929e408aeff7d600f44c807bfa53ab61dd537deb3968f93d96b899cb99abae5d38bc268fea4598fd68d35eb490b73781747efb99690c4fd00ef0fda48b6eb13f5ce494170d16c913daa39ff1bc0438c5d03e72718fb1ad502e89018ca80335d0cf07de10221916dea8a672f6e6065b97860b7572c0d9c42134cb7a613961b3ca03f060988aee0407d2b808ba78ee98475e85a765e6a3a6c4066c89d465bd77cb587c643b2198075aea38944e7dbd20769a5d3000acf074630df929f9918230ea4d6e67ae2d63f92249795bbc9317803e4f33854bf82c7fd8b9d5caf72672b38b385cf36c49821cac7b9866ecca1209cdc301276020178963abcda253f091569491b7fa1b7374219feff2f2923fafb8fdd387f24fcb678e18b60061b7576a3fb420b176a079c02254964e090850943bcba1f5aef41ed8f67dac6b6952f393b2cc144f4a698c9c371b36395ec915ae869df48efbf1477d2bc4271bc012389f417e4cd41790e0a256f81fc70c8076381dddc6f34ae73e96b5c61bef407f0d127f72e4b0e32790f8510484bb3179d5746b024dad9cd0aedfc78c64f5014dfdf84e77a183a310b7bd637e1143551da3fc5e097c170f151d315858c21511c2ed07b77ebcf6fb54216683b4655464c1b364f8382155f0a0c2adc68ddabad9445a9c12cd03088f6a3834b1319d3220638e2d7a4865c0ca2996987b8423c04c0aee5e193c559b136fbbff41f48c5a6b8e9c36775fb909dc04b27d79399dabd7", 0x1000}], 0x1, &(0x7f0000001640)="fe78d5a75365f0204f6aafd75040d373e0b351bca1a848670eaab38b407b035900c4d543854a009cfdc71add62cd", 0x2e, 0x4000}, 0x9c009) (async) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000)=0x5, 0x2) 10:52:56 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "490fc9794519af74", "b6d0d1788480c949077cc458f6cc8abd", '*KO8', "75b9bda5f0e2bb0c"}, 0x28) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x5, 0x35e4, 0x0, 0x1}, 0x10, [0x6, 0x10001, 0x1ff, 0x7e5d, 0x969, 0xe9cf, 0x8, 0x7, 0xba38, 0x8000, 0x0, 0x1f, 0x1, 0x5, 0x9, 0x7fffffff, 0x2, 0x2, 0x1000, 0x800, 0x200, 0x8, 0x754, 0x3bee, 0x3, 0x61e, 0x0, 0x1, 0xfff, 0x0, 0x3, 0xa47, 0x242, 0x2, 0x9, 0x7, 0x8, 0x2, 0x2, 0x9, 0x101, 0x0, 0x6, 0x4, 0x10001, 0x1, 0x8001, 0x10001, 0x6, 0x4, 0x6, 0x7f38, 0x8, 0x8, 0x3, 0x1, 0xb7, 0x3, 0x101, 0x0, 0xfa, 0x0, 0x6, 0x1], [0x8, 0x400, 0x7, 0x1, 0xeb22, 0x0, 0x2, 0xfffffffa, 0x7, 0x7, 0x7fffffff, 0x1, 0x7fff, 0xffffffff, 0x8, 0x81, 0x7, 0x0, 0x0, 0x2, 0x82, 0x80000001, 0x800000, 0x2, 0x8, 0x0, 0x1, 0xfffffffd, 0x2, 0x8, 0x8, 0xffff, 0x1, 0x7, 0xff49, 0x389, 0x80000001, 0x2a5831a6, 0x374c, 0x0, 0x2, 0x3, 0x32, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x0, 0x8, 0x0, 0x20, 0x7, 0x9, 0xa97a, 0x4, 0x20, 0x5, 0x9, 0x20, 0x1f, 0x4e8], [0x0, 0x1000, 0x5e, 0x1, 0x7ff, 0x40, 0x10000, 0x10001, 0x425f, 0x7fffffff, 0x80000001, 0x8, 0x8, 0x7, 0x3, 0x81, 0x0, 0x3, 0x7, 0x4, 0x1, 0x3f, 0x159, 0xab, 0x2, 0x4, 0x0, 0x0, 0x6, 0xf998, 0x2, 0x7, 0x100, 0x4, 0x8a0, 0x8, 0x5, 0xff, 0x2, 0x400000, 0x3ff, 0x0, 0x8, 0xfffffffb, 0x3, 0x7f2179c8, 0xd1f, 0x7b02, 0x3, 0xfffffff7, 0x1, 0x7, 0x8, 0x0, 0x40, 0x5, 0x8, 0x7ff, 0x9, 0x1, 0xc4c3, 0x7, 0x80, 0x1000], [0x8, 0xfffffedd, 0x4, 0x3, 0x1, 0x5, 0x3, 0x9, 0x7fffffff, 0x7, 0x10000, 0x7, 0x7f, 0x81, 0x99, 0x8001, 0x1000, 0x1, 0x7ff, 0x1, 0x1ff, 0xffffffff, 0x0, 0x9, 0x4, 0xf2, 0x5, 0xff, 0x3, 0x9, 0x0, 0x7, 0x3, 0x1f8, 0x2, 0x6, 0x3f, 0xd9c62689, 0x1, 0xc409, 0x3, 0x6, 0x100, 0x10000, 0x7, 0x7, 0x7ff, 0x4, 0x9, 0x4, 0xa8, 0x1, 0x3000, 0x1ff, 0x2f, 0xbe, 0x0, 0x8, 0x8, 0x8, 0x4, 0xdf, 0x1000, 0xffff8000]}, 0x45c) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{0x4, 0x9, 0x401, 0x2ee1}, 'syz1\x00', 0x3f}) [ 396.355116][T13900] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 396.360309][T13905] input: syz1 as /devices/virtual/input/input331 [ 396.405451][ T3672] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 396.596617][ T3672] usb 3-1: device descriptor read/64, error 18 [ 396.865415][ T3672] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 397.085338][ T3672] usb 3-1: device descriptor read/64, error 18 [ 397.205726][ T3672] usb usb3-port1: attempt power cycle [ 397.655346][ T3672] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 397.847149][ T3672] usb 3-1: device descriptor read/8, error -61 [ 398.115398][ T3672] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 398.297168][ T3672] usb 3-1: device descriptor read/8, error -61 [ 398.425560][ T3672] usb usb3-port1: unable to enumerate USB device 10:52:59 executing program 2: r0 = syz_usb_connect(0x6, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a776cd400d05031227de00000000000322006142ff000009040b0001bbd78700090507000000000000072501017f2000"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x56, {0x56, 0x24, "caef4c7b208d70c969cf525b4a54f66cb65c04b2504185f4097e7beb1bac3dbed8391381b544598fb2b59f7d109b6155dd98b8dc269b2c13615e50b757919de4b2f94754531fbab339ae1dec303a5b624c554969"}}, &(0x7f0000000000)={0x0, 0x3, 0x7, @string={0x7, 0x3, "80cf42b3a3"}}, &(0x7f0000000100)={0x0, 0xf, 0x119, {0x5, 0xf, 0x119, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0xcb7b, 0xf00f, 0xb741, [0xff00f0]}, @generic={0x2c, 0x10, 0x2, "7aae260cf0ca03f7c24d7a15b3b1938d3728ba39ebfbf7c13656f703720360ef23aa9f03d964bdf277"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x27, 0x4, 0x200}, @generic={0xb7, 0x10, 0xa, "13f1162ff6a9bf2030563d56a16e9d115b20d74948c2458409452e550fe4b60084d3cbb4665cc4d6684e0402d28f777e9bb00035cfc517ecdd2beaa0f4df59acc5d672fb849a7fe1341e7635142b8fc140db61bb0111600eee661d7a0c93cd0f24065a9d2e3b513dbde4977bbb1ab7bcf3d988f0b6afcf80171f0da20f3dec682100b70b1d496fceea154a700f4b79e895201ab0ce3ea0884f5f850c22c2c5a429f01cb47674fccf52d945feedbeb9bdcd35ed5b"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "b1979115c7119522cdf14a4928cb1f0f"}, @ptm_cap={0x3}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x80, 0x20, "2a691d98", "cb3851f8"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x2, 0x9, 0xff, 0x7, 0x122a, 0xff01}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x1d, 0xb0, "f7f01e343c71875042bdd6c41959492e37fa04935763c8ad86d07981adf907ab21b9a3027810f1f17a1aa3c50a72be20f349feddff0183638b7010a6042a48bb6119eb4385f446aa6733dd804a525985022bca6b167a586c419eb96385ab159bc45bea96530949495ffb9ed97aa96284de1d99ebc1dae9bb7ba1cac51c3015d5c5b326e47629b0e7050e11edefa195ef32ec49368e52cd07e1fb16363b10014ec08cfdccfdc3debd4713c2692568db6e"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0xe5a}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000540)={0x40, 0xb, 0x2, 'h['}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x19, 0x2, "9b88"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x81}}) syz_usb_control_io(r0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000840)={0x0, 0x22, 0xffffffffffffffb9, {0xd5, 0xc, "7a0e533504a4fd8f2c330fe539630f44dc5a6b870d92c968f0455884be2902e4ddb619177171df56b50b0a59b21807742b5e0a46957df87a60cc6734d80ba0d600957bbbc393cc84b665ce6db7caa0a825624b6c67138297bd60324468a4f9e799dda551646f4a0c57d99e8fb96f02fbcd41585a711caba2473d0d0e58a5dc34dc1af4a77bf6383711a1f4734a4dbe7734e40ad3b7de0dc57d8d21c958058a52c40492c7220b0c700343686b4dc660be56e955360b91be42922cb862ca6bf190f7ee49009791338a9ae1e7327cb9086c71ffc9"}}, &(0x7f0000000940)={0x0, 0x3, 0xb0, @string={0xb0, 0x3, "08a983d4da825c51b5e1c010f3b2766c52c33ff20e6d1d1f7104cea05e6cf80f961fadbeb799d521dfd6d5c6bd994a8080a3087ee16a45e73bc258f702fe73b15150fe086d606fe9a80b951b7efdb0fea561cca8c77bffc7fd3700474e6c7672ae19d4b7e0839288222465b5674e21fbf271bd59aff3ae66e073549baf0c91a984b7e931f827db46ad50ab06cd81fec51db2a6dcac9c817a32ec372b538f3ab522d1320bd1582865817957f41fcd"}}, &(0x7f0000001100)={0x0, 0xf, 0x103, {0x5, 0xf, 0x103, 0x5, [@generic={0x51, 0x10, 0xa, "ae857d7985998f23f9ec8bafefeb17839365f9e0986b05f13ca73e08cf66167741659981f90f5542fe5511704c49dc96fa66eaa4f7978e8b40550b75a9de2e5bb660c9b7e86f1dc95c4b6590c703"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xa4, 0x10, 0x1, "4e1448ca91f75905a26803b22030c63923267ff08cbb2ee4a7b6c51637d6df15062a0b1c99190aefbeb0ce8d74109481e9dc60aea37b9c7ffcaf0e038bf4a2e268edd988f36cace8b1363f19e3894ef23909bf75e3fde64ef01a98a949735f73b3883049ee7a452339c6c72c82b85d02550cf04d5c852e297534a8583fac9bbedc939d2394076bb7a118d7b89897e9ef0b76376405af805f304b03a89d32e6f0c1"}, @ext_cap={0x0, 0x10, 0x2, 0x2, 0x1, 0x6, 0x4}]}}, &(0x7f0000000b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x3, 0x73, ')@@\f', "89c75942"}}, &(0x7f0000000b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x80, 0x2, 0x81, 0x3, 0x3, 0x1000}}}, &(0x7f0000001040)={0x84, &(0x7f0000000c00)={0x20, 0x3, 0x61, "1b86120a76aa0845ae21a72f6a50bfafdd867a061d0ba373b765677e486fdda0d01c491d0a352f26be2ca0c97d8c91cdb6ec7a84cdfdedd0a7f6197242bf8cd6888ba902de08b0661ea89a2e62d00edd67ace80d7fc64cc3cab70eaa8bebc2b30a"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0xd6}, &(0x7f0000000cc0)={0x0, 0x8, 0x1}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000d40)={0x20, 0x0, 0x8, {0x1, 0x1, [0xf00f]}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "7e96"}, &(0x7f0000000e40)={0x40, 0xf, 0x2}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000f00)={0x40, 0x19, 0x2, 'x*'}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0x40}}) 10:52:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 9) 10:52:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:59 executing program 3: r0 = memfd_create(&(0x7f0000000480)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13JF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[\x0f\x8fC/\x1a\x9dOt\xf08n\xef\x00\xf4\x05\x00\xd7]\xbf0\xe2\xe4y\x9f\xd1\x80\x1d@P\xdf\x129\xde\xf6\xf8{\x85*m%\xdd\\H\x82k\b\xf1\xaa\xe1\x9a\x91\x1b\x90:\xe5\xf7\xdc\x10;vi\xba\xd2\xf4\xbas\xf9\xe5\n\xaa{gB\n\x1aN(\xd4\x05j\x00\x00\x00\x00\x00\x00\x00\x00\xd55|\xc7\bbKa\xff2\xbb-\xf9\x86`\x1f\x7f\x12:\x12\xc2i\x189\x18q\x162\x1aD\x04Ai\xcef\x16v`3\xfcZ\x01\x00z\x1b\x8a8\x00\x00!\xba\x97\xbcX\xe1>\x8f8Sf\xfe\v\rpH\xad\xda\xee\x13\xae\xa1\xc1\xd0\xb1\x87\r:\xfed\x02@\x97\xd0\xdb\xf4\xb0\xf0\x1f\xc5\xd3)\x8147}\x8e\xb2\xf7c\xd97S(\xaeVD\xbb\xdc\xef\x99\x1e\x8f\xc4\xe6Q\xffF&O\xba\xa6Q\xa0\xda|\x92\xbdd\xa4\xb9]\xae*\xec\xa2\x1d\xce\x9c\x8c\xab-\xeeU\x1c\x00\xb6J\x02o\x8a\xdbF\x80<4g\x00'/351, 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000200), 0x4) (async, rerun: 32) r2 = socket$inet6(0xa, 0x3, 0x6) (rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000003c0)=@multiplanar_userptr={0xffffffff, 0x9, 0x4, 0x10000, 0x3, {}, {0x2, 0x0, 0xff, 0x4, 0x1, 0x84, "d8c82be7"}, 0x4, 0x2, {&(0x7f0000000340)=[{0x2, 0x1f, {&(0x7f0000000240)}, 0x3}, {0x0, 0x1800000, {&(0x7f0000000280)}, 0x4}]}, 0x5, 0x0, r1}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x6}, 0x20) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000080)={0x0, 0x7fffffff, 0x3ff}) (async) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) (async) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f00000000c0)=0x8, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r2}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@empty, 0x80000100, 0x0, 0xff, 0xa, 0x2002, 0x8}, &(0x7f00000001c0)=0x20) sendmsg$tipc(r3, &(0x7f0000001680)={&(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x4, 0x2}}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000600)="44a6c58b81ccc5a79524f2efabbbf7009d97b1ac12cba7497c6345547ea64bf656c2b2a43f6c174b20558805ea6c52a80a69a54a2138ad5640fbed798574ae3213866a2f6a3a7e772e2a74201fa493ae1753e897bd067a73b192a9efc66f17fe1c9abb4238e1f5cb06767b14a59575c24d28d74511d18d5aa45628d3bbab31dd5a2c8a4f0f8bad3b61d1d7a1157ea1eb0ba623c2d91073b8952aad08342edb3c33f6b2046d4d7d26994de9946927893ec636f4cda8dbbd64c43bb90de26736c6195ab11bc7f7ce102b2727bf2d0e0db43d35b7521922bfd54cfc5cfb761a4703e509edfad20d9dcdb3fbda5e99d24de4845cc6670ce38abd46f184345ae9ac552304ff49160b13d40743ed14a88d627a70518f34129aec47e04ba99869ebf2c10bb93ad3bc20e18fafbb29197d00db8374e575aa0719a36b73cfaccdc1c65cecc7992e8b9b217fd3a66cfbf6941ca0951cce2cbccf45b6113492ce2d7ecdce7f5134218524683469c8cd935f39c8dea2d9621bf7769f88ab838b42a7166f8ca688a152946d3da4636ac1931a16e5ce0e67ef05a93d4cd4e1d271b508cb0ac200192f69455e355d5683141cefed2a41cb7c0eeb89deea2bf621434f0ebe8fc6cbe9ca7290de3b78b14237f7338392c8dcf148ea2a8e3a3f48f29324344ae6006fd4e0a5f95fbb42894e58d605bb3da1f2c0e7c819bd61e992d50ad5c994719b79cce1bbf54a829519d692043ae313c807a33c8b5e474a42890ba733a29f3d3fc77201771806620383e77e57c2d645adb39b837b9cfa10ff14a9157cdbaea3fbcc9a4aa464f12510b500b2799a19f1de7414d350982a1a34cca9c4a710ca8772e43ce259ae8995ec4c36268279e876cd6b1603e03450ccb2b0cd0e22110685bf35658b065a648eeba9000b902c14691897102eec74cd1b93e45f583b188ec417e294d11e6fe3bcc3030b4692d4ac5eb9d95301c7264cd8a80fe82c03e25e05285d663750246ad4b6316d9d58f4a4345114f4c00f84616c961c076a0ab3dfb57023087b98fab63c75a119c9353ab3ecd10b15f7a37e09d373d8b4fc610b34967ad5e973eb36663b8882dfbf9e3ef01eb061afc0ae63d108e65a5590a0e7a11adae26154575255155a6db0336661b1adf17dfd2954903bc5374f804479cedd1d4892bc887e4ea998ddb210837415aefc88802861b1b1477ce357a784e6d383c5470179141d66a33def3c1097d94f9d2c01e235cb176c4975ddcc97e0bfeb65db37d82550d69c54325b616bf627a011e108331bda360d7408f95f78add952f27056df303eb988954cef39515b4fcf342e5a34b0c08eeeb59acef896d97410a27bdd0a0d7586eb8f804270dc7b8c3cab3ca702c0812fc7c3f37f39bcb0446f6431dbdab646557dc206d001de9b842099adc3d7120d25d6468b1d4813ced2004475ecea3b7e3d01b46629f6ecd0eb4e367561f6e3d5fcca209232a9c62ecd5dceb7e99a2b22518d9f49b928914dc3237a6af6cb2b4b7fe68c945d4d01d467b147b11cc65ea322b44b7d4e86a85749350b7f10097a85a23caf932bb3bce54c098749755462e456fc33dc96b9eaacbecae74cccea3d047264b1e5c6fae3443a788dddf473e4ade41dcf4cf9c44aeea29530128ed25ca0edd1ad54470577e8d2d6430daea37dc03e283284bef911f147f243d0e56ab381d7e3a2ca1999fef86b1957a61296160a6f1783a1e6051f18525d8670e7f40eeeaad7b841300f7eff8d92c26a720c8dc6dc9355ae9c80454ddc59d87cc8eb08a2bb229955eb2f5919b313e5b08f57a9317d08920a8e288fa5a37f5ffe4f40ec02a589da5c751223efb34a535fd3c82e34f9679ed6c3a0461e2371921fcbdd5b3ba7b3fa3566c1939c00a2d8ea8dff47c345352202357616360f1a9d18bd31bd01222b88bf56028309627ecb8654fa7c65bb097837160a725b243d2738ab2515114828041a37eb4a8a9360e5c12f2d3f9457c87a0c53762d4aa5eb267e5af29d393e1fe2079c7a09c4bc80b378a44b5bdbee96698a065888ebfe80d2cc8dd7042f7185a416dc667ef8c5cbb78bd15e7fd1e77a2091062930d7480946588948622d76b88c606e7de5de03b838be490c44e48aff0a14a39c06a69f9f73ca9e8de6c4d4509c4e0d142d1ea0cfca2e5cf82ac22a516f888f3c8aa9e9e8413fe54018371f32a36102250204b645fa3d095db673ee35091dcd528eaf2c5e87fa6193495dfbbd5a1d0f80508b8d88a26dfa8124b0b969b9ca36445c18bc99509bc19f0c6c998cc1404b4945e93753908a03f8b0fb02d692b1b642d36f5798f42d7c38cf7930dc9baae1dc393fb9f3f411d2d748679ee771be43c8380ead0dcadc8c5a79bf7ae35cd759544b95fbed9d4344b895bfed899c318d44d152f9c8ffc4821ed0fd179e29943ec33ed5f486c94821efbb5b2ba4623bd0c6123dc3ad1784760f63f1369960e78cea6e6b50d5e63acc6ef6464b45048625b86c887434cac791a5ac32b6385351191a84d87ce2ac226e1b4d25ec07d55a481f067510e3a0af99107901a5cc1c89228d35f6c3418f54d5fc4a874ea3d38966213e55613cb6e131174b604aa6773a2d4c511c42efc9f907ef5a25f1506bf79d55ce2ce466056b590323e0d252bfa4fa8f5e102ba24ae0f26ad18a752c974f69dbeee8689752e0cbeffb5684dd3208c4da3286b9abf8c8f5aa6dc9e1ceb35e4a27fb5db14b12c0ef2e12ef1a991cd77fd66439b185f757dbd41ebff49de6924e708b5ab099065a7402b9b7eb7549f334114d34d1c54f54beff848c078fd63f9fb01e62121cbe756d3600048330bf99271a50a59ea86e47b1b5a3bab9b0a5b45eba3413567654412c6aa734652e4ca1002e7d290827ad6f12ed809bc91fc359a9a10683584faf39f9734abfab901db1c0c617cc40c86f720e18e2617cc65e22b352647dff099a199c372ac03fdb0441074c00410d9afbffed76fcd66055ba1bd733f2f0bbb6ba6787eeb32f758d9e790ccb736efcaf95616383c54d3142da4fe1853948f96ce12f200ba1f1bc188d9a756bdfa42e62d45b3d8262ea8c8efa005a52895fe540a6595c3e0868863cecc3df9bb289e654b90d4113decc59d464521bdcee21d30121b9f7e840b74cb5dd32db9359c3ae4024095325febc8e7d2700350781a5cdc6f3cb8d8d78b468a23ab71cd9efd755072d914cb59d9febf4ee02626028fdb36885fba12b741d9e1688ff09a94f3001f3b999f9c12a95be025fdae5d28177f207ec2f8ee2eb9839f2b4011ce777fb092297d028b5ce76640dcced77d204da79584ce581710a18fbdcadea0d21bdb553e5436687927e750644612afa74d47476d7618da59aa8b20eb3a7d3365c0c6fd367d82882d5139f364be7e698124084529c5f2e72dd846b1a4dcbfcdc167bfc8989c0b72b6a92ef9590a2f4bbb3c141e1e444057289e3ad9104c8274cac6fcb4eae3aad48b664f9b8f2338a18adc797efebbf131065f3b11e19795ee27aed1ac31de21423c972b5e4e305470dca7cc25a0020f0f94f7c829ac185ebda688e3a50c58ee876fa565a831b0185de1737a12368c71dbf5fa5b83808cc6ed8c699d983abc060cfbfea69bb85a9d76f940400c9074e2e9cb379150b07f593ec3307533c415caa2e126ff2270f3254b13b4a8a18c798050629b952a623a7f308c778a283e89ffe9a252cc3c9a0910ba54135142ba72670d02ec7e3a353e56259789edc9c2347737a263571d2d10c50753cdf64bf82a0d19bcd94be3054fca8adb0df804cc10f6d47543f013279707e4f41937a0523a25def552bd1ca99d1aa40bcf5cedbdde4327b6e5f43034c1f9f5b3f9c2a820815c19cfbe6da87576b3f558c1bc447844c2396d6b325f4f9685ae31bc2e687a54d021fc4ba2ecd727d7bb3ec6faa242e5b5e725c39081094c1e03e63c7737bf61eea277e62dc966fdfe02091a11df6dd7609309e2bff8c9c5be84ac7e86ddba464b8481077361f98b7856bc958b340ee11a1549a70079332072b9b6dd9d5192f0de937a7c7d89462c64f2da112a0914659e4bba4c8a5479425095430c52c0b08e440290f43cada52a09ab5f5713608e5402032fac485e5032dca35dbef90e48853d55665be6f6487d22938ed38e8875752c9866943f8ccfc42747bb28b58d899a690df516d3adedf647d9f0df6e660498a2af06dcb31152cc4cc1e15306ba63c6a89cc23216df6aa1f55fb67ae70915a309896af9a1c256f3e045295106e60a6b3be011b41ce72bff645705f184b70485c786db1b450be7066392e742d518f6934cee7560acb0cd9bc0d8cad2f1622b5a467a18b781bcec9f9f78de8299008b5f0876f2450491805fb3d6237e1ac8abdb88781bac55c1a25dfc44fe78bb3b361de0bf1d01d0ac9191ee1932aa8299aa81883e38e014af395e7a5676442360959631944615c01ad1302fdd0ee0a49d7cc68b3001479fe4f832a0f2fbaf53b3e5713ddd4ac10cf8cdb971afe3d2e2cd2403281e8c657e67e97db8364837750b0205c59f340bce91b74f04a3cf4540e40789741b50c1536db6feb09bfd422228e86ba5a59b7506e85fa8f1d44bcf1cd8eeeb0e4af0295f33e03fb9592dacc6ef2322bcb652b6ecb712217ebb531165d2f7014fb13401c7347e33d458604d91e6f13a54bce99837fe9901aa7f52343082e739baf3d46990d172c78174c29d8b11e387740628766ff733a094e83a9ac701555d9875d23494442805fde59251e6851d7c0d74c3ce993ce97a092b0bf92b0e20fc050672bd92d9e8afa5d455b9e2320b9923f01466b97b9d2760836088238147f6393b77060e99d09fb4dc5b95be5ed3c84b1c4784b9897070895d9876d36294ff9687744b3a40294063287d712485bdf2a6a28af9eec4845e6092477240996090518febbe5037d407e457a0220601624b9c151f9d7ef897b09a1fe310a2b08cfa7ec551d3d3672b2c5c4f8334dd656e1c3074a6d72f97a112d3382cac353c545fcb235a9233bc8b396929e408aeff7d600f44c807bfa53ab61dd537deb3968f93d96b899cb99abae5d38bc268fea4598fd68d35eb490b73781747efb99690c4fd00ef0fda48b6eb13f5ce494170d16c913daa39ff1bc0438c5d03e72718fb1ad502e89018ca80335d0cf07de10221916dea8a672f6e6065b97860b7572c0d9c42134cb7a613961b3ca03f060988aee0407d2b808ba78ee98475e85a765e6a3a6c4066c89d465bd77cb587c643b2198075aea38944e7dbd20769a5d3000acf074630df929f9918230ea4d6e67ae2d63f92249795bbc9317803e4f33854bf82c7fd8b9d5caf72672b38b385cf36c49821cac7b9866ecca1209cdc301276020178963abcda253f091569491b7fa1b7374219feff2f2923fafb8fdd387f24fcb678e18b60061b7576a3fb420b176a079c02254964e090850943bcba1f5aef41ed8f67dac6b6952f393b2cc144f4a698c9c371b36395ec915ae869df48efbf1477d2bc4271bc012389f417e4cd41790e0a256f81fc70c8076381dddc6f34ae73e96b5c61bef407f0d127f72e4b0e32790f8510484bb3179d5746b024dad9cd0aedfc78c64f5014dfdf84e77a183a310b7bd637e1143551da3fc5e097c170f151d315858c21511c2ed07b77ebcf6fb54216683b4655464c1b364f8382155f0a0c2adc68ddabad9445a9c12cd03088f6a3834b1319d3220638e2d7a4865c0ca2996987b8423c04c0aee5e193c559b136fbbff41f48c5a6b8e9c36775fb909dc04b27d79399dabd7", 0x1000}], 0x1, &(0x7f0000001640)="fe78d5a75365f0204f6aafd75040d373e0b351bca1a848670eaab38b407b035900c4d543854a009cfdc71add62cd", 0x2e, 0x4000}, 0x9c009) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000)=0x5, 0x2) 10:52:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "490fc9794519af74", "b6d0d1788480c949077cc458f6cc8abd", '*KO8', "75b9bda5f0e2bb0c"}, 0x28) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x5, 0x35e4, 0x0, 0x1}, 0x10, [0x6, 0x10001, 0x1ff, 0x7e5d, 0x969, 0xe9cf, 0x8, 0x7, 0xba38, 0x8000, 0x0, 0x1f, 0x1, 0x5, 0x9, 0x7fffffff, 0x2, 0x2, 0x1000, 0x800, 0x200, 0x8, 0x754, 0x3bee, 0x3, 0x61e, 0x0, 0x1, 0xfff, 0x0, 0x3, 0xa47, 0x242, 0x2, 0x9, 0x7, 0x8, 0x2, 0x2, 0x9, 0x101, 0x0, 0x6, 0x4, 0x10001, 0x1, 0x8001, 0x10001, 0x6, 0x4, 0x6, 0x7f38, 0x8, 0x8, 0x3, 0x1, 0xb7, 0x3, 0x101, 0x0, 0xfa, 0x0, 0x6, 0x1], [0x8, 0x400, 0x7, 0x1, 0xeb22, 0x0, 0x2, 0xfffffffa, 0x7, 0x7, 0x7fffffff, 0x1, 0x7fff, 0xffffffff, 0x8, 0x81, 0x7, 0x0, 0x0, 0x2, 0x82, 0x80000001, 0x800000, 0x2, 0x8, 0x0, 0x1, 0xfffffffd, 0x2, 0x8, 0x8, 0xffff, 0x1, 0x7, 0xff49, 0x389, 0x80000001, 0x2a5831a6, 0x374c, 0x0, 0x2, 0x3, 0x32, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x0, 0x8, 0x0, 0x20, 0x7, 0x9, 0xa97a, 0x4, 0x20, 0x5, 0x9, 0x20, 0x1f, 0x4e8], [0x0, 0x1000, 0x5e, 0x1, 0x7ff, 0x40, 0x10000, 0x10001, 0x425f, 0x7fffffff, 0x80000001, 0x8, 0x8, 0x7, 0x3, 0x81, 0x0, 0x3, 0x7, 0x4, 0x1, 0x3f, 0x159, 0xab, 0x2, 0x4, 0x0, 0x0, 0x6, 0xf998, 0x2, 0x7, 0x100, 0x4, 0x8a0, 0x8, 0x5, 0xff, 0x2, 0x400000, 0x3ff, 0x0, 0x8, 0xfffffffb, 0x3, 0x7f2179c8, 0xd1f, 0x7b02, 0x3, 0xfffffff7, 0x1, 0x7, 0x8, 0x0, 0x40, 0x5, 0x8, 0x7ff, 0x9, 0x1, 0xc4c3, 0x7, 0x80, 0x1000], [0x8, 0xfffffedd, 0x4, 0x3, 0x1, 0x5, 0x3, 0x9, 0x7fffffff, 0x7, 0x10000, 0x7, 0x7f, 0x81, 0x99, 0x8001, 0x1000, 0x1, 0x7ff, 0x1, 0x1ff, 0xffffffff, 0x0, 0x9, 0x4, 0xf2, 0x5, 0xff, 0x3, 0x9, 0x0, 0x7, 0x3, 0x1f8, 0x2, 0x6, 0x3f, 0xd9c62689, 0x1, 0xc409, 0x3, 0x6, 0x100, 0x10000, 0x7, 0x7, 0x7ff, 0x4, 0x9, 0x4, 0xa8, 0x1, 0x3000, 0x1ff, 0x2f, 0xbe, 0x0, 0x8, 0x8, 0x8, 0x4, 0xdf, 0x1000, 0xffff8000]}, 0x45c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{0x4, 0x9, 0x401, 0x2ee1}, 'syz1\x00', 0x3f}) [ 398.890557][T13921] input: syz1 as /devices/virtual/input/input334 [ 398.902512][T13914] input: syz1 as /devices/virtual/input/input335 [ 398.904841][T13918] input: syz1 as /devices/virtual/input/input336 [ 398.914915][T13916] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 398.923466][T13920] input: syz1 as /devices/virtual/input/input333 10:52:59 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x414080, 0x1bc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) 10:52:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000140)='./file0\x00', 0x24100, 0x100) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000d06f615030103000000230000000000000000050001000700000011000300686173683a69702c6d61720000"], 0x30}}, 0x0) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [""]}, 0x14}}, 0x20040041) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 398.993639][T13926] FAULT_INJECTION: forcing a failure. [ 398.993639][T13926] name failslab, interval 1, probability 0, space 0, times 0 [ 399.043384][T13926] CPU: 0 PID: 13926 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 399.053935][T13926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.064010][T13926] Call Trace: [ 399.067302][T13926] [ 399.070246][T13926] dump_stack_lvl+0xcd/0x134 [ 399.074871][T13926] should_fail.cold+0x5/0xa [ 399.079400][T13926] ? skb_clone+0x170/0x3c0 [ 399.083845][T13926] should_failslab+0x5/0x10 [ 399.088383][T13926] kmem_cache_alloc+0x5e/0x4b0 10:52:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:59 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') (rerun: 64) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x414080, 0x1bc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 399.093183][T13926] skb_clone+0x170/0x3c0 [ 399.097460][T13926] netlink_broadcast+0x9a6/0xd50 [ 399.102508][T13926] ? alloc_uevent_skb+0x1c2/0x210 [ 399.107569][T13926] kobject_uevent_env+0xaa8/0x1600 [ 399.112722][T13926] ? dev_fwnode+0x79/0x90 [ 399.117081][T13926] device_del+0x7f1/0xc80 [ 399.121442][T13926] ? __device_link_del+0x380/0x380 [ 399.126596][T13926] cdev_device_del+0x19/0x100 [ 399.131301][T13926] joydev_disconnect+0x3d/0xb0 [ 399.136096][T13926] __input_unregister_device+0x206/0x470 [ 399.141761][T13926] input_unregister_device+0xb4/0xf0 [ 399.147071][T13926] uinput_destroy_device+0x1f4/0x260 [ 399.152393][T13926] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 399.158325][T13926] ? uinput_write+0x11e0/0x11e0 [ 399.163211][T13926] ? __context_tracking_exit+0xb8/0xe0 [ 399.168711][T13926] ? __fget_files+0x28c/0x470 [ 399.173420][T13926] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 399.179691][T13926] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 399.185877][T13926] __x64_sys_ioctl+0x193/0x200 10:52:59 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') (async) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x414080, 0x1bc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 399.190668][T13926] do_syscall_64+0x35/0xb0 [ 399.195112][T13926] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 399.201027][T13926] RIP: 0033:0x7f4825f54059 [ 399.205460][T13926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 399.225087][T13926] RSP: 002b:00007f48248a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.225121][T13926] RAX: ffffffffffffffda RBX: 00007f4826067030 RCX: 00007f4825f54059 10:52:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 399.225138][T13926] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 399.225154][T13926] RBP: 00007f48248a81d0 R08: 0000000000000000 R09: 0000000000000000 [ 399.225170][T13926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.225185][T13926] R13: 00007f482659ab1f R14: 00007f48248a8300 R15: 0000000000022000 [ 399.225223][T13926] [ 399.297676][T13943] input: syz1 as /devices/virtual/input/input341 10:52:59 executing program 2: r0 = syz_usb_connect(0x6, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a776cd400d05031227de00000000000322006142ff000009040b0001bbd78700090507000000000000072501017f2000"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x56, {0x56, 0x24, "caef4c7b208d70c969cf525b4a54f66cb65c04b2504185f4097e7beb1bac3dbed8391381b544598fb2b59f7d109b6155dd98b8dc269b2c13615e50b757919de4b2f94754531fbab339ae1dec303a5b624c554969"}}, &(0x7f0000000000)={0x0, 0x3, 0x7, @string={0x7, 0x3, "80cf42b3a3"}}, &(0x7f0000000100)={0x0, 0xf, 0x119, {0x5, 0xf, 0x119, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0xcb7b, 0xf00f, 0xb741, [0xff00f0]}, @generic={0x2c, 0x10, 0x2, "7aae260cf0ca03f7c24d7a15b3b1938d3728ba39ebfbf7c13656f703720360ef23aa9f03d964bdf277"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x27, 0x4, 0x200}, @generic={0xb7, 0x10, 0xa, "13f1162ff6a9bf2030563d56a16e9d115b20d74948c2458409452e550fe4b60084d3cbb4665cc4d6684e0402d28f777e9bb00035cfc517ecdd2beaa0f4df59acc5d672fb849a7fe1341e7635142b8fc140db61bb0111600eee661d7a0c93cd0f24065a9d2e3b513dbde4977bbb1ab7bcf3d988f0b6afcf80171f0da20f3dec682100b70b1d496fceea154a700f4b79e895201ab0ce3ea0884f5f850c22c2c5a429f01cb47674fccf52d945feedbeb9bdcd35ed5b"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "b1979115c7119522cdf14a4928cb1f0f"}, @ptm_cap={0x3}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x80, 0x20, "2a691d98", "cb3851f8"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x2, 0x9, 0xff, 0x7, 0x122a, 0xff01}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x1d, 0xb0, "f7f01e343c71875042bdd6c41959492e37fa04935763c8ad86d07981adf907ab21b9a3027810f1f17a1aa3c50a72be20f349feddff0183638b7010a6042a48bb6119eb4385f446aa6733dd804a525985022bca6b167a586c419eb96385ab159bc45bea96530949495ffb9ed97aa96284de1d99ebc1dae9bb7ba1cac51c3015d5c5b326e47629b0e7050e11edefa195ef32ec49368e52cd07e1fb16363b10014ec08cfdccfdc3debd4713c2692568db6e"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0xe5a}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000540)={0x40, 0xb, 0x2, 'h['}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x19, 0x2, "9b88"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x81}}) (async) syz_usb_control_io(r0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000840)={0x0, 0x22, 0xffffffffffffffb9, {0xd5, 0xc, "7a0e533504a4fd8f2c330fe539630f44dc5a6b870d92c968f0455884be2902e4ddb619177171df56b50b0a59b21807742b5e0a46957df87a60cc6734d80ba0d600957bbbc393cc84b665ce6db7caa0a825624b6c67138297bd60324468a4f9e799dda551646f4a0c57d99e8fb96f02fbcd41585a711caba2473d0d0e58a5dc34dc1af4a77bf6383711a1f4734a4dbe7734e40ad3b7de0dc57d8d21c958058a52c40492c7220b0c700343686b4dc660be56e955360b91be42922cb862ca6bf190f7ee49009791338a9ae1e7327cb9086c71ffc9"}}, &(0x7f0000000940)={0x0, 0x3, 0xb0, @string={0xb0, 0x3, "08a983d4da825c51b5e1c010f3b2766c52c33ff20e6d1d1f7104cea05e6cf80f961fadbeb799d521dfd6d5c6bd994a8080a3087ee16a45e73bc258f702fe73b15150fe086d606fe9a80b951b7efdb0fea561cca8c77bffc7fd3700474e6c7672ae19d4b7e0839288222465b5674e21fbf271bd59aff3ae66e073549baf0c91a984b7e931f827db46ad50ab06cd81fec51db2a6dcac9c817a32ec372b538f3ab522d1320bd1582865817957f41fcd"}}, &(0x7f0000001100)={0x0, 0xf, 0x103, {0x5, 0xf, 0x103, 0x5, [@generic={0x51, 0x10, 0xa, "ae857d7985998f23f9ec8bafefeb17839365f9e0986b05f13ca73e08cf66167741659981f90f5542fe5511704c49dc96fa66eaa4f7978e8b40550b75a9de2e5bb660c9b7e86f1dc95c4b6590c703"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xa4, 0x10, 0x1, "4e1448ca91f75905a26803b22030c63923267ff08cbb2ee4a7b6c51637d6df15062a0b1c99190aefbeb0ce8d74109481e9dc60aea37b9c7ffcaf0e038bf4a2e268edd988f36cace8b1363f19e3894ef23909bf75e3fde64ef01a98a949735f73b3883049ee7a452339c6c72c82b85d02550cf04d5c852e297534a8583fac9bbedc939d2394076bb7a118d7b89897e9ef0b76376405af805f304b03a89d32e6f0c1"}, @ext_cap={0x0, 0x10, 0x2, 0x2, 0x1, 0x6, 0x4}]}}, &(0x7f0000000b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x3, 0x73, ')@@\f', "89c75942"}}, &(0x7f0000000b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x80, 0x2, 0x81, 0x3, 0x3, 0x1000}}}, &(0x7f0000001040)={0x84, &(0x7f0000000c00)={0x20, 0x3, 0x61, "1b86120a76aa0845ae21a72f6a50bfafdd867a061d0ba373b765677e486fdda0d01c491d0a352f26be2ca0c97d8c91cdb6ec7a84cdfdedd0a7f6197242bf8cd6888ba902de08b0661ea89a2e62d00edd67ace80d7fc64cc3cab70eaa8bebc2b30a"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0xd6}, &(0x7f0000000cc0)={0x0, 0x8, 0x1}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000d40)={0x20, 0x0, 0x8, {0x1, 0x1, [0xf00f]}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "7e96"}, &(0x7f0000000e40)={0x40, 0xf, 0x2}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000f00)={0x40, 0x19, 0x2, 'x*'}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0x40}}) 10:52:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) (async, rerun: 64) r1 = fcntl$dupfd(r0, 0x0, r0) (rerun: 64) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000140)='./file0\x00', 0x24100, 0x100) (async) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000d06f615030103000000230000000000000000050001000700000011000300686173683a69702c6d61720000"], 0x30}}, 0x0) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [""]}, 0x14}}, 0x20040041) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:52:59 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000003940)={0x0, 0x0, &(0x7f00000026c0)={0x0, 0x20}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001fff00"/20, @ANYRES32=r6, @ANYBLOB="e3ffffff00000000140012800b000100626174616476"], 0x68}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) 10:52:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 10) [ 399.634399][T13954] input: syz1 as /devices/virtual/input/input342 [ 399.642512][T13952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 399.659488][T13949] input: syz1 as /devices/virtual/input/input344 [ 399.662570][T13953] input: syz1 as /devices/virtual/input/input345 10:52:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000140)='./file0\x00', 0x24100, 0x100) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000d06f615030103000000230000000000000000050001000700000011000300686173683a69702c6d61720000"], 0x30}}, 0x0) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [""]}, 0x14}}, 0x20040041) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) (async) fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) open(&(0x7f0000000140)='./file0\x00', 0x24100, 0x100) (async) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000d06f615030103000000230000000000000000050001000700000011000300686173683a69702c6d61720000"], 0x30}}, 0x0) (async) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [""]}, 0x14}}, 0x20040041) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) [ 399.682396][T13954] FAULT_INJECTION: forcing a failure. [ 399.682396][T13954] name failslab, interval 1, probability 0, space 0, times 0 [ 399.711301][T13952] device batadv2 entered promiscuous mode [ 399.719253][T13954] CPU: 0 PID: 13954 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 399.729804][T13954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.739882][T13954] Call Trace: [ 399.740381][T13952] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 399.743204][T13954] [ 399.743218][T13954] dump_stack_lvl+0xcd/0x134 [ 399.743256][T13954] should_fail.cold+0x5/0xa [ 399.743288][T13954] should_failslab+0x5/0x10 [ 399.766549][T13954] __kmalloc_track_caller+0x79/0x430 [ 399.771867][T13954] ? kasprintf+0xbb/0xf0 [ 399.771901][T13954] ? mark_lock.part.0+0xee/0x1910 [ 399.771938][T13954] kvasprintf+0xb5/0x150 [ 399.785424][T13954] ? bust_spinlocks+0xe0/0xe0 [ 399.790134][T13954] ? __lock_acquire+0x1666/0x56c0 [ 399.795292][T13954] kasprintf+0xbb/0xf0 [ 399.799387][T13954] ? kvasprintf_const+0x190/0x190 [ 399.804456][T13954] ? input_match_device_id+0x790/0x790 [ 399.806339][T13959] batman_adv: batadv2: Adding interface: macvlan4 [ 399.809946][T13954] device_get_devnode+0x154/0x2b0 [ 399.809985][T13954] devtmpfs_delete_node+0xae/0x150 [ 399.810014][T13954] ? devtmpfs_create_node+0x210/0x210 [ 399.810039][T13954] ? find_held_lock+0x2d/0x110 [ 399.836737][T13954] ? klist_put+0x159/0x1d0 [ 399.841188][T13954] ? lock_downgrade+0x6e0/0x6e0 [ 399.841563][T13959] batman_adv: batadv2: The MTU of interface macvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.846070][T13954] ? do_raw_spin_unlock+0x171/0x230 [ 399.846107][T13954] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 10:53:00 executing program 5: munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x5) [ 399.846142][T13954] ? kobject_put+0xb9/0x540 [ 399.846170][T13954] ? device_link_release_fn+0xc0/0xc0 [ 399.846196][T13954] ? klist_children_put+0x41/0x50 [ 399.846222][T13954] ? klist_put+0x169/0x1d0 [ 399.902253][T13954] device_del+0x93e/0xc80 [ 399.906623][T13954] ? __device_link_del+0x380/0x380 [ 399.911772][T13954] ? kfree+0xd0/0x390 [ 399.915793][T13954] cdev_device_del+0x19/0x100 [ 399.920500][T13954] evdev_disconnect+0x3d/0xb0 [ 399.925300][T13954] __input_unregister_device+0x206/0x470 [ 399.930997][T13954] input_unregister_device+0xb4/0xf0 [ 399.931034][T13954] uinput_destroy_device+0x1f4/0x260 [ 399.931073][T13954] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 399.947524][T13954] ? uinput_write+0x11e0/0x11e0 [ 399.952425][T13954] ? __context_tracking_exit+0xb8/0xe0 [ 399.956818][T13959] batman_adv: batadv2: Interface activated: macvlan4 [ 399.957923][T13954] ? __fget_files+0x28c/0x470 [ 399.957968][T13954] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 399.967875][T13976] input: syz1 as /devices/virtual/input/input351 [ 399.969321][T13954] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 399.969367][T13954] __x64_sys_ioctl+0x193/0x200 [ 399.969399][T13954] do_syscall_64+0x35/0xb0 [ 399.997321][T13954] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 400.003254][T13954] RIP: 0033:0x7f4825f54059 [ 400.007697][T13954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 400.027337][T13954] RSP: 002b:00007f48248c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.035782][T13954] RAX: ffffffffffffffda RBX: 00007f4826066f60 RCX: 00007f4825f54059 [ 400.043776][T13954] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 400.051772][T13954] RBP: 00007f48248c91d0 R08: 0000000000000000 R09: 0000000000000000 [ 400.059766][T13954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.067759][T13954] R13: 00007f482659ab1f R14: 00007f48248c9300 R15: 0000000000022000 [ 400.075776][T13954] 10:53:00 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000003940)={0x0, 0x0, &(0x7f00000026c0)={0x0, 0x20}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001fff00"/20, @ANYRES32=r6, @ANYBLOB="e3ffffff00000000140012800b000100626174616476"], 0x68}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000003940)={0x0, 0x0, &(0x7f00000026c0)={0x0, 0x20}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001fff00"/20, @ANYRES32=r6, @ANYBLOB="e3ffffff00000000140012800b000100626174616476"], 0x68}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x2, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) 10:53:00 executing program 5: munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async, rerun: 32) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (rerun: 32) r1 = fcntl$dupfd(r0, 0x0, r0) (async, rerun: 64) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async, rerun: 64) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async, rerun: 32) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) (async, rerun: 32) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async, rerun: 64) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x5) (rerun: 64) 10:53:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 400.239030][T13986] input: syz1 as /devices/virtual/input/input353 [ 400.240804][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 400.292493][T13985] device batadv3 entered promiscuous mode [ 400.301130][T13985] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 400.340544][T13989] batman_adv: batadv3: Adding interface: macvlan5 [ 400.365543][T13989] batman_adv: batadv3: The MTU of interface macvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.411896][T13989] batman_adv: batadv3: Interface activated: macvlan5 [ 400.442070][T13985] batman_adv: batadv3: Adding interface: macvlan6 10:53:00 executing program 2: r0 = syz_usb_connect(0x6, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a776cd400d05031227de00000000000322006142ff000009040b0001bbd78700090507000000000000072501017f2000"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x56, {0x56, 0x24, "caef4c7b208d70c969cf525b4a54f66cb65c04b2504185f4097e7beb1bac3dbed8391381b544598fb2b59f7d109b6155dd98b8dc269b2c13615e50b757919de4b2f94754531fbab339ae1dec303a5b624c554969"}}, &(0x7f0000000000)={0x0, 0x3, 0x7, @string={0x7, 0x3, "80cf42b3a3"}}, &(0x7f0000000100)={0x0, 0xf, 0x119, {0x5, 0xf, 0x119, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0xcb7b, 0xf00f, 0xb741, [0xff00f0]}, @generic={0x2c, 0x10, 0x2, "7aae260cf0ca03f7c24d7a15b3b1938d3728ba39ebfbf7c13656f703720360ef23aa9f03d964bdf277"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x27, 0x4, 0x200}, @generic={0xb7, 0x10, 0xa, "13f1162ff6a9bf2030563d56a16e9d115b20d74948c2458409452e550fe4b60084d3cbb4665cc4d6684e0402d28f777e9bb00035cfc517ecdd2beaa0f4df59acc5d672fb849a7fe1341e7635142b8fc140db61bb0111600eee661d7a0c93cd0f24065a9d2e3b513dbde4977bbb1ab7bcf3d988f0b6afcf80171f0da20f3dec682100b70b1d496fceea154a700f4b79e895201ab0ce3ea0884f5f850c22c2c5a429f01cb47674fccf52d945feedbeb9bdcd35ed5b"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "b1979115c7119522cdf14a4928cb1f0f"}, @ptm_cap={0x3}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x80, 0x20, "2a691d98", "cb3851f8"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x2, 0x9, 0xff, 0x7, 0x122a, 0xff01}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x1d, 0xb0, "f7f01e343c71875042bdd6c41959492e37fa04935763c8ad86d07981adf907ab21b9a3027810f1f17a1aa3c50a72be20f349feddff0183638b7010a6042a48bb6119eb4385f446aa6733dd804a525985022bca6b167a586c419eb96385ab159bc45bea96530949495ffb9ed97aa96284de1d99ebc1dae9bb7ba1cac51c3015d5c5b326e47629b0e7050e11edefa195ef32ec49368e52cd07e1fb16363b10014ec08cfdccfdc3debd4713c2692568db6e"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0xe5a}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000540)={0x40, 0xb, 0x2, 'h['}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x19, 0x2, "9b88"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x81}}) (async) syz_usb_control_io(r0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000840)={0x0, 0x22, 0xffffffffffffffb9, {0xd5, 0xc, "7a0e533504a4fd8f2c330fe539630f44dc5a6b870d92c968f0455884be2902e4ddb619177171df56b50b0a59b21807742b5e0a46957df87a60cc6734d80ba0d600957bbbc393cc84b665ce6db7caa0a825624b6c67138297bd60324468a4f9e799dda551646f4a0c57d99e8fb96f02fbcd41585a711caba2473d0d0e58a5dc34dc1af4a77bf6383711a1f4734a4dbe7734e40ad3b7de0dc57d8d21c958058a52c40492c7220b0c700343686b4dc660be56e955360b91be42922cb862ca6bf190f7ee49009791338a9ae1e7327cb9086c71ffc9"}}, &(0x7f0000000940)={0x0, 0x3, 0xb0, @string={0xb0, 0x3, "08a983d4da825c51b5e1c010f3b2766c52c33ff20e6d1d1f7104cea05e6cf80f961fadbeb799d521dfd6d5c6bd994a8080a3087ee16a45e73bc258f702fe73b15150fe086d606fe9a80b951b7efdb0fea561cca8c77bffc7fd3700474e6c7672ae19d4b7e0839288222465b5674e21fbf271bd59aff3ae66e073549baf0c91a984b7e931f827db46ad50ab06cd81fec51db2a6dcac9c817a32ec372b538f3ab522d1320bd1582865817957f41fcd"}}, &(0x7f0000001100)={0x0, 0xf, 0x103, {0x5, 0xf, 0x103, 0x5, [@generic={0x51, 0x10, 0xa, "ae857d7985998f23f9ec8bafefeb17839365f9e0986b05f13ca73e08cf66167741659981f90f5542fe5511704c49dc96fa66eaa4f7978e8b40550b75a9de2e5bb660c9b7e86f1dc95c4b6590c703"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xa4, 0x10, 0x1, "4e1448ca91f75905a26803b22030c63923267ff08cbb2ee4a7b6c51637d6df15062a0b1c99190aefbeb0ce8d74109481e9dc60aea37b9c7ffcaf0e038bf4a2e268edd988f36cace8b1363f19e3894ef23909bf75e3fde64ef01a98a949735f73b3883049ee7a452339c6c72c82b85d02550cf04d5c852e297534a8583fac9bbedc939d2394076bb7a118d7b89897e9ef0b76376405af805f304b03a89d32e6f0c1"}, @ext_cap={0x0, 0x10, 0x2, 0x2, 0x1, 0x6, 0x4}]}}, &(0x7f0000000b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x3, 0x73, ')@@\f', "89c75942"}}, &(0x7f0000000b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x80, 0x2, 0x81, 0x3, 0x3, 0x1000}}}, &(0x7f0000001040)={0x84, &(0x7f0000000c00)={0x20, 0x3, 0x61, "1b86120a76aa0845ae21a72f6a50bfafdd867a061d0ba373b765677e486fdda0d01c491d0a352f26be2ca0c97d8c91cdb6ec7a84cdfdedd0a7f6197242bf8cd6888ba902de08b0661ea89a2e62d00edd67ace80d7fc64cc3cab70eaa8bebc2b30a"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0xd6}, &(0x7f0000000cc0)={0x0, 0x8, 0x1}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000d40)={0x20, 0x0, 0x8, {0x1, 0x1, [0xf00f]}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "7e96"}, &(0x7f0000000e40)={0x40, 0xf, 0x2}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000f00)={0x40, 0x19, 0x2, 'x*'}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0x40}}) 10:53:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 11) 10:53:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:00 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000003940)={0x0, 0x0, &(0x7f00000026c0)={0x0, 0x20}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001fff00"/20, @ANYRES32=r6, @ANYBLOB="e3ffffff00000000140012800b000100626174616476"], 0x68}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket(0x1, 0x2, 0x0) (rerun: 64) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 400.451375][T13985] batman_adv: batadv3: The MTU of interface macvlan6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.479440][T13985] batman_adv: batadv3: Interface activated: macvlan6 10:53:00 executing program 5: munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x5) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x5) (async) 10:53:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 400.533083][T14000] input: syz1 as /devices/virtual/input/input420 [ 400.562792][T14003] input: syz1 as /devices/virtual/input/input421 [ 400.571171][T13999] input: syz1 as /devices/virtual/input/input422 10:53:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:00 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [], [0x101]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 400.626329][T14017] FAULT_INJECTION: forcing a failure. [ 400.626329][T14017] name failslab, interval 1, probability 0, space 0, times 0 [ 400.672765][T14020] input: syz1 as /devices/virtual/input/input425 [ 400.700881][T14017] CPU: 1 PID: 14017 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 400.706810][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 400.711442][T14017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.711461][T14017] Call Trace: [ 400.711470][T14017] [ 400.711480][T14017] dump_stack_lvl+0xcd/0x134 [ 400.742411][T14017] should_fail.cold+0x5/0xa [ 400.746946][T14017] ? kobject_uevent_env+0x235/0x1600 [ 400.752259][T14017] should_failslab+0x5/0x10 [ 400.756789][T14017] kmem_cache_alloc_trace+0x55/0x3d0 [ 400.762108][T14017] ? dev_uevent_filter+0xd0/0xd0 [ 400.767074][T14017] kobject_uevent_env+0x235/0x1600 [ 400.772227][T14017] ? dev_fwnode+0x79/0x90 [ 400.776582][T14017] device_del+0x7f1/0xc80 [ 400.780941][T14017] ? __device_link_del+0x380/0x380 [ 400.786088][T14017] cdev_device_del+0x19/0x100 [ 400.790794][T14017] evdev_disconnect+0x3d/0xb0 [ 400.795496][T14017] __input_unregister_device+0x206/0x470 [ 400.801159][T14017] input_unregister_device+0xb4/0xf0 [ 400.806463][T14017] uinput_destroy_device+0x1f4/0x260 [ 400.811780][T14017] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 400.817709][T14017] ? uinput_write+0x11e0/0x11e0 [ 400.822606][T14017] ? __context_tracking_exit+0xb8/0xe0 [ 400.825509][T14022] device batadv4 entered promiscuous mode [ 400.828102][T14017] ? __fget_files+0x28c/0x470 [ 400.828145][T14017] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 400.844741][T14017] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 400.850930][T14017] __x64_sys_ioctl+0x193/0x200 [ 400.855718][T14017] do_syscall_64+0x35/0xb0 [ 400.859539][T14022] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 400.860152][T14017] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 400.860188][T14017] RIP: 0033:0x7f4825f54059 [ 400.877217][T14017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 400.897276][T14017] RSP: 002b:00007f48248a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.905713][T14017] RAX: ffffffffffffffda RBX: 00007f4826067030 RCX: 00007f4825f54059 [ 400.913708][T14017] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 10:53:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 400.921693][T14017] RBP: 00007f48248a81d0 R08: 0000000000000000 R09: 0000000000000000 [ 400.929681][T14017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.937668][T14017] R13: 00007f482659ab1f R14: 00007f48248a8300 R15: 0000000000022000 [ 400.945678][T14017] [ 400.958349][T14025] input: syz1 as /devices/virtual/input/input427 [ 401.039985][T14035] input: syz1 as /devices/virtual/input/input429 10:53:01 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0x6, 0x99, {0x99, 0x2b, "de3b9fa465cb735cbed4b653aa635561cacd24686392941ac73569888911e5c40e18d4f2cdf55689209e7de001edb35ad5c89c0194594e22ba060b2e4d54216a19fad1b7a0f895c6dae9648f7830eca24a014f17df043bcf98104d02fbc65366982fdadcc57486591c3adfd385aed99bb63f57c3df98956946c91912ba803aea3f61f8059ce95cd8359b958d59d60d765a644a7e35cce2"}}, &(0x7f0000000100)={0x0, 0x3, 0x28, @string={0x28, 0x3, "47c38d73cca034b03c741cbb6ba834cc8ff05c7952e21cb9f9722ff28bacad08e1e2a589ead1"}}, &(0x7f0000000140)={0x0, 0xf, 0x56, {0x5, 0xf, 0x56, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x90, 0x9, 0x6, 0x5, 0x1f}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "5cc7ad146287a10b49a82bb150bdc6c1"}, @ss_container_id={0x14, 0x10, 0x4, 0xc0, "39763e5d5a3e02f481ae560acc49bccc"}, @ss_container_id={0x14, 0x10, 0x4, 0x7c, "e394045c12a758031f750396b2c2fbe9"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0xc, 0x4}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6d, 0x2, 0x20, 0xfc, "5426f01e", "ba6322c2"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x1, 0x0, 0x4, 0x7, 0x81, 0x7c00}}}, &(0x7f0000000680)={0x84, &(0x7f0000000280)={0x40, 0x9, 0x1c, "f249c3e208255150b49d83f1e0d5a49309564d0dad08be41e1ff1957"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x20, 0x40}}, &(0x7f00000003c0)={0x40, 0x7, 0x2}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000440)={0x40, 0xb, 0x2, "6bd0"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0xfff}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000500)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x19, 0x2, "d247"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x10}}) 10:53:01 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [], [0x101]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:01 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) 10:53:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 12) [ 401.298233][T14043] input: syz1 as /devices/virtual/input/input431 [ 401.317463][T14047] input: syz1 as /devices/virtual/input/input434 [ 401.327625][T14045] input: syz1 as /devices/virtual/input/input433 10:53:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:01 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 401.348164][T14043] FAULT_INJECTION: forcing a failure. [ 401.348164][T14043] name failslab, interval 1, probability 0, space 0, times 0 [ 401.400669][T14043] CPU: 1 PID: 14043 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 401.403581][T14052] input: syz1 as /devices/virtual/input/input435 [ 401.411232][T14043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.411252][T14043] Call Trace: [ 401.411261][T14043] [ 401.411272][T14043] dump_stack_lvl+0xcd/0x134 [ 401.411309][T14043] should_fail.cold+0x5/0xa [ 401.411339][T14043] ? kobject_get_path+0xbe/0x230 [ 401.411384][T14043] should_failslab+0x5/0x10 [ 401.411415][T14043] __kmalloc+0x72/0x450 [ 401.411451][T14043] kobject_get_path+0xbe/0x230 [ 401.411485][T14043] kobject_uevent_env+0x259/0x1600 [ 401.411521][T14043] ? dev_fwnode+0x79/0x90 [ 401.411554][T14043] device_del+0x7f1/0xc80 [ 401.411586][T14043] ? __device_link_del+0x380/0x380 [ 401.411622][T14043] cdev_device_del+0x19/0x100 [ 401.485366][T14043] evdev_disconnect+0x3d/0xb0 [ 401.490074][T14043] __input_unregister_device+0x206/0x470 [ 401.495864][T14043] input_unregister_device+0xb4/0xf0 [ 401.501179][T14043] uinput_destroy_device+0x1f4/0x260 [ 401.506505][T14043] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 401.512426][T14043] ? uinput_write+0x11e0/0x11e0 [ 401.517298][T14043] ? __context_tracking_exit+0xb8/0xe0 [ 401.522781][T14043] ? __fget_files+0x28c/0x470 [ 401.527474][T14043] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 401.533725][T14043] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 401.539895][T14043] __x64_sys_ioctl+0x193/0x200 [ 401.544673][T14043] do_syscall_64+0x35/0xb0 [ 401.549271][T14043] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 401.555172][T14043] RIP: 0033:0x7f4825f54059 [ 401.559606][T14043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 401.579235][T14043] RSP: 002b:00007f48248c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.587662][T14043] RAX: ffffffffffffffda RBX: 00007f4826066f60 RCX: 00007f4825f54059 10:53:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 401.595636][T14043] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 401.603604][T14043] RBP: 00007f48248c91d0 R08: 0000000000000000 R09: 0000000000000000 [ 401.611573][T14043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.619542][T14043] R13: 00007f482659ab1f R14: 00007f48248c9300 R15: 0000000000022000 [ 401.627536][T14043] 10:53:01 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [], [0x101]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:01 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 401.705502][ T3664] usb 3-1: new high-speed USB device number 22 using dummy_hcd 10:53:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 401.750935][T14057] input: syz1 as /devices/virtual/input/input436 [ 401.799908][T14062] input: syz1 as /devices/virtual/input/input437 [ 401.824116][T14066] input: syz1 as /devices/virtual/input/input438 [ 402.065624][ T3664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 402.078929][ T3664] usb 3-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 402.088453][ T3664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.099575][ T3664] usb 3-1: config 0 descriptor?? [ 402.138522][ T3664] snd-usb-audio: probe of 3-1:0.0 failed with error -2 10:53:04 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0x6, 0x99, {0x99, 0x2b, "de3b9fa465cb735cbed4b653aa635561cacd24686392941ac73569888911e5c40e18d4f2cdf55689209e7de001edb35ad5c89c0194594e22ba060b2e4d54216a19fad1b7a0f895c6dae9648f7830eca24a014f17df043bcf98104d02fbc65366982fdadcc57486591c3adfd385aed99bb63f57c3df98956946c91912ba803aea3f61f8059ce95cd8359b958d59d60d765a644a7e35cce2"}}, &(0x7f0000000100)={0x0, 0x3, 0x28, @string={0x28, 0x3, "47c38d73cca034b03c741cbb6ba834cc8ff05c7952e21cb9f9722ff28bacad08e1e2a589ead1"}}, &(0x7f0000000140)={0x0, 0xf, 0x56, {0x5, 0xf, 0x56, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x90, 0x9, 0x6, 0x5, 0x1f}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "5cc7ad146287a10b49a82bb150bdc6c1"}, @ss_container_id={0x14, 0x10, 0x4, 0xc0, "39763e5d5a3e02f481ae560acc49bccc"}, @ss_container_id={0x14, 0x10, 0x4, 0x7c, "e394045c12a758031f750396b2c2fbe9"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0xc, 0x4}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6d, 0x2, 0x20, 0xfc, "5426f01e", "ba6322c2"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x1, 0x0, 0x4, 0x7, 0x81, 0x7c00}}}, &(0x7f0000000680)={0x84, &(0x7f0000000280)={0x40, 0x9, 0x1c, "f249c3e208255150b49d83f1e0d5a49309564d0dad08be41e1ff1957"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x20, 0x40}}, &(0x7f00000003c0)={0x40, 0x7, 0x2}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000440)={0x40, 0xb, 0x2, "6bd0"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0xfff}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000500)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x19, 0x2, "d247"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x10}}) 10:53:04 executing program 3: r0 = memfd_create(&(0x7f0000000000)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="016600150000000000040000000000003cbac2e33a67f0374c48e0a00d2354408902cc9664ea11a7423b49d6ea6bfbff98534b756b6e23a856e1d30c27123c1abdf0161f5d93b50af3cda4d5d5185d2d59149246373eb693205c4266c7e4f92bef3fb4190200bb83ee6d5af9b47fea0b73b1588b128e697ca9c5539d595653198f4730714a806a85f4f6ba2532715d0afbf344aa827f0f75ead4df181d1af6b67bce7bfc"]) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) 10:53:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:04 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 13) 10:53:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 404.333813][ T3672] usb 3-1: USB disconnect, device number 22 [ 404.367835][T14071] input: syz1 as /devices/virtual/input/input439 10:53:04 executing program 3: r0 = memfd_create(&(0x7f0000000000)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="016600150000000000040000000000003cbac2e33a67f0374c48e0a00d2354408902cc9664ea11a7423b49d6ea6bfbff98534b756b6e23a856e1d30c27123c1abdf0161f5d93b50af3cda4d5d5185d2d59149246373eb693205c4266c7e4f92bef3fb4190200bb83ee6d5af9b47fea0b73b1588b128e697ca9c5539d595653198f4730714a806a85f4f6ba2532715d0afbf344aa827f0f75ead4df181d1af6b67bce7bfc"]) (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 404.395857][T14074] input: syz1 as /devices/virtual/input/input440 [ 404.408436][T14076] input: syz1 as /devices/virtual/input/input442 10:53:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 404.453807][T14079] FAULT_INJECTION: forcing a failure. [ 404.453807][T14079] name failslab, interval 1, probability 0, space 0, times 0 [ 404.501675][T14079] CPU: 1 PID: 14079 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 404.512219][T14079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.522281][T14079] Call Trace: [ 404.525557][T14079] [ 404.528490][T14079] dump_stack_lvl+0xcd/0x134 [ 404.533107][T14079] should_fail.cold+0x5/0xa [ 404.537620][T14079] should_failslab+0x5/0x10 [ 404.542131][T14079] __kmalloc_track_caller+0x79/0x430 [ 404.547419][T14079] ? kasprintf+0xbb/0xf0 [ 404.551672][T14079] kvasprintf+0xb5/0x150 [ 404.555921][T14079] ? bust_spinlocks+0xe0/0xe0 [ 404.560611][T14079] ? pointer+0xa00/0xa00 [ 404.564868][T14079] ? __input_unregister_device+0x206/0x470 [ 404.570698][T14079] ? input_unregister_device+0xb4/0xf0 [ 404.576169][T14079] ? uinput_destroy_device+0x1f4/0x260 [ 404.581638][T14079] ? uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 404.587725][T14079] kasprintf+0xbb/0xf0 [ 404.591804][T14079] ? kvasprintf_const+0x190/0x190 [ 404.596833][T14079] ? cleanup_uevent_env+0x40/0x40 [ 404.601865][T14079] ? pointer+0xa00/0xa00 [ 404.606118][T14079] ? input_match_device_id+0x790/0x790 [ 404.611579][T14079] device_get_devnode+0x154/0x2b0 [ 404.616612][T14079] dev_uevent+0x41c/0x780 [ 404.620946][T14079] ? device_get_devnode+0x2b0/0x2b0 [ 404.626150][T14079] ? perf_trace_irq_matrix_cpu+0x690/0x950 [ 404.631985][T14079] ? memcpy+0x39/0x60 [ 404.635987][T14079] ? device_get_devnode+0x2b0/0x2b0 [ 404.641187][T14079] kobject_uevent_env+0x618/0x1600 [ 404.646313][T14079] ? dev_fwnode+0x79/0x90 [ 404.650665][T14079] device_del+0x7f1/0xc80 [ 404.655014][T14079] ? __device_link_del+0x380/0x380 [ 404.660135][T14079] cdev_device_del+0x19/0x100 [ 404.664830][T14079] evdev_disconnect+0x3d/0xb0 [ 404.669535][T14079] __input_unregister_device+0x206/0x470 [ 404.675192][T14079] input_unregister_device+0xb4/0xf0 [ 404.680484][T14079] uinput_destroy_device+0x1f4/0x260 [ 404.685782][T14079] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 404.691690][T14079] ? uinput_write+0x11e0/0x11e0 [ 404.696554][T14079] ? __context_tracking_exit+0xb8/0xe0 [ 404.702029][T14079] ? __fget_files+0x28c/0x470 [ 404.706719][T14079] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 404.712964][T14079] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 404.719125][T14079] __x64_sys_ioctl+0x193/0x200 [ 404.723912][T14079] do_syscall_64+0x35/0xb0 [ 404.728333][T14079] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 404.734245][T14079] RIP: 0033:0x7f4825f54059 [ 404.738672][T14079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 404.758277][T14079] RSP: 002b:00007f48248a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.766690][T14079] RAX: ffffffffffffffda RBX: 00007f4826067030 RCX: 00007f4825f54059 [ 404.774658][T14079] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 404.782626][T14079] RBP: 00007f48248a81d0 R08: 0000000000000000 R09: 0000000000000000 [ 404.790609][T14079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.798580][T14079] R13: 00007f482659ab1f R14: 00007f48248a8300 R15: 0000000000022000 [ 404.806569][T14079] 10:53:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:05 executing program 3: r0 = memfd_create(&(0x7f0000000000)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="016600150000000000040000000000003cbac2e33a67f0374c48e0a00d2354408902cc9664ea11a7423b49d6ea6bfbff98534b756b6e23a856e1d30c27123c1abdf0161f5d93b50af3cda4d5d5185d2d59149246373eb693205c4266c7e4f92bef3fb4190200bb83ee6d5af9b47fea0b73b1588b128e697ca9c5539d595653198f4730714a806a85f4f6ba2532715d0afbf344aa827f0f75ead4df181d1af6b67bce7bfc"]) (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 404.867403][T14089] input: syz1 as /devices/virtual/input/input444 [ 404.889534][T14088] input: syz1 as /devices/virtual/input/input445 [ 405.105520][ T3672] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 405.485515][ T3672] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 405.506748][ T3672] usb 3-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 405.521584][ T3672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.546189][ T3672] usb 3-1: config 0 descriptor?? [ 405.589624][ T3672] snd-usb-audio: probe of 3-1:0.0 failed with error -2 10:53:07 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0x6, 0x99, {0x99, 0x2b, "de3b9fa465cb735cbed4b653aa635561cacd24686392941ac73569888911e5c40e18d4f2cdf55689209e7de001edb35ad5c89c0194594e22ba060b2e4d54216a19fad1b7a0f895c6dae9648f7830eca24a014f17df043bcf98104d02fbc65366982fdadcc57486591c3adfd385aed99bb63f57c3df98956946c91912ba803aea3f61f8059ce95cd8359b958d59d60d765a644a7e35cce2"}}, &(0x7f0000000100)={0x0, 0x3, 0x28, @string={0x28, 0x3, "47c38d73cca034b03c741cbb6ba834cc8ff05c7952e21cb9f9722ff28bacad08e1e2a589ead1"}}, &(0x7f0000000140)={0x0, 0xf, 0x56, {0x5, 0xf, 0x56, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x90, 0x9, 0x6, 0x5, 0x1f}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "5cc7ad146287a10b49a82bb150bdc6c1"}, @ss_container_id={0x14, 0x10, 0x4, 0xc0, "39763e5d5a3e02f481ae560acc49bccc"}, @ss_container_id={0x14, 0x10, 0x4, 0x7c, "e394045c12a758031f750396b2c2fbe9"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0xc, 0x4}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6d, 0x2, 0x20, 0xfc, "5426f01e", "ba6322c2"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x1, 0x0, 0x4, 0x7, 0x81, 0x7c00}}}, &(0x7f0000000680)={0x84, &(0x7f0000000280)={0x40, 0x9, 0x1c, "f249c3e208255150b49d83f1e0d5a49309564d0dad08be41e1ff1957"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x20, 0x40}}, &(0x7f00000003c0)={0x40, 0x7, 0x2}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000440)={0x40, 0xb, 0x2, "6bd0"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0xfff}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000500)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x19, 0x2, "d247"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x10}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0x6, 0x99, {0x99, 0x2b, "de3b9fa465cb735cbed4b653aa635561cacd24686392941ac73569888911e5c40e18d4f2cdf55689209e7de001edb35ad5c89c0194594e22ba060b2e4d54216a19fad1b7a0f895c6dae9648f7830eca24a014f17df043bcf98104d02fbc65366982fdadcc57486591c3adfd385aed99bb63f57c3df98956946c91912ba803aea3f61f8059ce95cd8359b958d59d60d765a644a7e35cce2"}}, &(0x7f0000000100)={0x0, 0x3, 0x28, @string={0x28, 0x3, "47c38d73cca034b03c741cbb6ba834cc8ff05c7952e21cb9f9722ff28bacad08e1e2a589ead1"}}, &(0x7f0000000140)={0x0, 0xf, 0x56, {0x5, 0xf, 0x56, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x90, 0x9, 0x6, 0x5, 0x1f}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "5cc7ad146287a10b49a82bb150bdc6c1"}, @ss_container_id={0x14, 0x10, 0x4, 0xc0, "39763e5d5a3e02f481ae560acc49bccc"}, @ss_container_id={0x14, 0x10, 0x4, 0x7c, "e394045c12a758031f750396b2c2fbe9"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0xc, 0x4}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6d, 0x2, 0x20, 0xfc, "5426f01e", "ba6322c2"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x1, 0x0, 0x4, 0x7, 0x81, 0x7c00}}}, &(0x7f0000000680)={0x84, &(0x7f0000000280)={0x40, 0x9, 0x1c, "f249c3e208255150b49d83f1e0d5a49309564d0dad08be41e1ff1957"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x20, 0x40}}, &(0x7f00000003c0)={0x40, 0x7, 0x2}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000440)={0x40, 0xb, 0x2, "6bd0"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0xfff}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000500)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x19, 0x2, "d247"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x10}}) (async) 10:53:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 14) 10:53:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:07 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x28127a727261f0e9, 0x8010, r0, 0x1c6c8000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x64763000) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r2, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 407.392582][ T3664] usb 3-1: USB disconnect, device number 23 10:53:07 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) (async) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x28127a727261f0e9, 0x8010, r0, 0x1c6c8000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x64763000) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r2, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 407.432729][T14102] input: syz1 as /devices/virtual/input/input447 [ 407.442304][T14103] input: syz1 as /devices/virtual/input/input448 [ 407.459212][T14105] input: syz1 as /devices/virtual/input/input449 10:53:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 407.489801][T14102] FAULT_INJECTION: forcing a failure. [ 407.489801][T14102] name failslab, interval 1, probability 0, space 0, times 0 [ 407.519051][T14102] CPU: 0 PID: 14102 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 407.529685][T14102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.539758][T14102] Call Trace: [ 407.539773][T14102] [ 407.539785][T14102] dump_stack_lvl+0xcd/0x134 [ 407.539822][T14102] should_fail.cold+0x5/0xa [ 407.539854][T14102] should_failslab+0x5/0x10 [ 407.559643][T14102] kmem_cache_alloc_node+0x65/0x4f0 [ 407.564913][T14102] ? __alloc_skb+0x215/0x340 [ 407.569545][T14102] __alloc_skb+0x215/0x340 [ 407.574007][T14102] alloc_uevent_skb+0x7b/0x210 [ 407.578864][T14102] kobject_uevent_env+0xadf/0x1600 [ 407.584029][T14102] ? dev_fwnode+0x79/0x90 10:53:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:07 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) (async) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x28127a727261f0e9, 0x8010, r0, 0x1c6c8000) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x64763000) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r2, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 407.588409][T14102] device_del+0x7f1/0xc80 [ 407.592779][T14102] ? __device_link_del+0x380/0x380 [ 407.597949][T14102] cdev_device_del+0x19/0x100 [ 407.602664][T14102] evdev_disconnect+0x3d/0xb0 [ 407.607384][T14102] __input_unregister_device+0x206/0x470 [ 407.613058][T14102] input_unregister_device+0xb4/0xf0 [ 407.618375][T14102] uinput_destroy_device+0x1f4/0x260 [ 407.618420][T14102] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 407.618455][T14102] ? uinput_write+0x11e0/0x11e0 [ 407.634492][T14102] ? __context_tracking_exit+0xb8/0xe0 10:53:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 407.640005][T14102] ? __fget_files+0x28c/0x470 [ 407.644725][T14102] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 407.651000][T14102] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 407.657196][T14102] __x64_sys_ioctl+0x193/0x200 [ 407.661998][T14102] do_syscall_64+0x35/0xb0 [ 407.666444][T14102] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 407.672376][T14102] RIP: 0033:0x7f4825f54059 10:53:07 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x2, 0x3, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) close_range(r0, r1, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r2, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 407.676811][T14102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 407.696451][T14102] RSP: 002b:00007f48248c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.704893][T14102] RAX: ffffffffffffffda RBX: 00007f4826066f60 RCX: 00007f4825f54059 [ 407.712896][T14102] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 407.720893][T14102] RBP: 00007f48248c91d0 R08: 0000000000000000 R09: 0000000000000000 [ 407.728885][T14102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 407.736864][T14102] R13: 00007f482659ab1f R14: 00007f48248c9300 R15: 0000000000022000 [ 407.744860][T14102] [ 407.759464][T14122] input: syz1 as /devices/virtual/input/input453 [ 408.065502][ T3664] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 408.435601][ T3664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 408.452551][ T3664] usb 3-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 408.472088][ T3664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.492747][ T3664] usb 3-1: config 0 descriptor?? [ 408.538604][ T3664] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 409.091121][T14128] UDC core: couldn't find an available UDC or it's busy: -16 [ 409.115573][T14128] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:53:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 15) 10:53:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:10 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009c1b5e4099042b10c0c70000000109021b000100000507000000000000"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x40, 0x8, 0x4, {0x4, 0x3, "221f"}}, &(0x7f0000000080)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "78549fc3abbf1e40dccf092367e20b62f568f048d235985d8238f997ae05f06d27b11d6742e8dd2dbff947f3e575d28ab7374423b04b7ca89c47455876dd3b3141d3ffe826d69203208922ac484ec0b15518611f4a7dec35d2fca59a04039bf34412b9a704aa24db537f3cb8bd4a3b255f3124394b5c8d9714fb57e8efe277f3d1d7549c8053412cbe22b55d6c2ab4d21fd5ed2179dd89cc23cc501128b4239aa100b0f233e12ba2d3aa3680a5ef22fbe80fb14b6d435a7342a8c988b15a5e5bdf4656e04b55847122845fdbc631cc84fd0bc22541655855e691c0136f910b8482706abed104ecf23da7f59079b890e080fb826275f054402f7fc6"}}, &(0x7f00000001c0)={0x0, 0xf, 0x74, {0x5, 0xf, 0x74, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x9, 0xff00, 0x7, [0xff0030, 0xcf, 0xff, 0xff00, 0x0]}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x7, 0xf00f, 0x1000, [0xff3f00, 0xff0000, 0xc0, 0xffa000, 0xff00c0, 0xc000]}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x5, 0xf780, 0x1, [0xff0030, 0xff000f]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "934a7286aee32de0bd76a737617981d8"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x0, 0x6, 0x81, "7e9c77cf", "f23ed99f"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x4, 0x1f, 0x7, 0x7, 0x1ff, 0x3}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x5, 0x8b, "9a1b7cf5971b55fa02d9f517024ed1fa0cae0207839ae9f29a3cc9549372018d74674f66db3d3a5975ef3ab639c09ec71b60161c94a68985a59c501042766d55d0d3b21a2ecda6a406d8c7cd8120318fc43d976012c555cfde576e9b84b978babc17f4eb8104e53afd58998032ff78d01a78772cfa0af342b3d351594f3e7eb1449fd275a570d5f990cbe5"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x60, 0x10}}, &(0x7f00000004c0)={0x40, 0x7, 0x2}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000540)={0x40, 0xb, 0x2, "1946"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "70a6"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x1c, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xe0}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x4}}) 10:53:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xa) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x237) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:10 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) (async) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x2, 0x3, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) close_range(r0, r1, 0x2) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r2, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 410.465553][ T3664] usb 3-1: USB disconnect, device number 24 [ 410.524044][T14135] input: syz1 as /devices/virtual/input/input454 [ 410.533140][T14133] input: syz1 as /devices/virtual/input/input455 [ 410.541779][T14134] input: syz1 as /devices/virtual/input/input456 [ 410.553556][T14140] input: syz1 as /devices/virtual/input/input457 10:53:10 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x2, 0x3, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) close_range(r0, r1, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r2, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) (async) socket$inet6(0xa, 0x3, 0x6) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x2, 0x3, 0x2}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) (async) close_range(r0, r1, 0x2) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') (async) pread64(r2, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) 10:53:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xa) r1 = fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x237) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) (async, rerun: 64) ioctl$UI_DEV_CREATE(r0, 0x5501) (rerun: 64) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 410.579567][T14133] FAULT_INJECTION: forcing a failure. [ 410.579567][T14133] name failslab, interval 1, probability 0, space 0, times 0 [ 410.679227][T14133] CPU: 1 PID: 14133 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 410.689779][T14133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.699854][T14133] Call Trace: [ 410.703147][T14133] [ 410.706139][T14133] dump_stack_lvl+0xcd/0x134 [ 410.710768][T14133] should_fail.cold+0x5/0xa [ 410.715305][T14133] should_failslab+0x5/0x10 [ 410.719834][T14133] __kmalloc_node_track_caller+0x7d/0x470 [ 410.725580][T14133] ? alloc_uevent_skb+0x7b/0x210 [ 410.730552][T14133] __alloc_skb+0xde/0x340 [ 410.734925][T14133] alloc_uevent_skb+0x7b/0x210 [ 410.739717][T14133] kobject_uevent_env+0xadf/0x1600 [ 410.744863][T14133] ? dev_fwnode+0x79/0x90 [ 410.749229][T14133] device_del+0x7f1/0xc80 [ 410.753587][T14133] ? __device_link_del+0x380/0x380 [ 410.758734][T14133] cdev_device_del+0x19/0x100 [ 410.763434][T14133] evdev_disconnect+0x3d/0xb0 [ 410.768140][T14133] __input_unregister_device+0x206/0x470 [ 410.773804][T14133] input_unregister_device+0xb4/0xf0 [ 410.779136][T14133] uinput_destroy_device+0x1f4/0x260 [ 410.784453][T14133] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 410.790378][T14133] ? uinput_write+0x11e0/0x11e0 [ 410.795249][T14133] ? __context_tracking_exit+0xb8/0xe0 [ 410.800732][T14133] ? __fget_files+0x28c/0x470 [ 410.805425][T14133] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 410.811680][T14133] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 410.817870][T14133] __x64_sys_ioctl+0x193/0x200 [ 410.822644][T14133] do_syscall_64+0x35/0xb0 [ 410.827062][T14133] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 410.832955][T14133] RIP: 0033:0x7f4825f54059 [ 410.837373][T14133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 410.856979][T14133] RSP: 002b:00007f48248c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.865395][T14133] RAX: ffffffffffffffda RBX: 00007f4826066f60 RCX: 00007f4825f54059 10:53:10 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x13}, 0x10) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x519c, 0x9, 0x5, 0x2, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r2, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) 10:53:11 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x13}, 0x10) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x519c, 0x9, 0x5, 0x2, 0x1}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r2, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) 10:53:11 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x13}, 0x10) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x519c, 0x9, 0x5, 0x2, 0x1}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r2, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 410.873367][T14133] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 410.881336][T14133] RBP: 00007f48248c91d0 R08: 0000000000000000 R09: 0000000000000000 [ 410.889319][T14133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 410.897309][T14133] R13: 00007f482659ab1f R14: 00007f48248c9300 R15: 0000000000022000 [ 410.905300][T14133] [ 410.977873][T14152] input: syz1 as /devices/virtual/input/input458 [ 410.985722][T14155] input: syz1 as /devices/virtual/input/input459 10:53:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 16) 10:53:11 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 411.067928][ T3664] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 411.083252][T14155] input: syz1 as /devices/virtual/input/input460 [ 411.139445][T14169] input: syz1 as /devices/virtual/input/input461 [ 411.178387][T14169] FAULT_INJECTION: forcing a failure. [ 411.178387][T14169] name failslab, interval 1, probability 0, space 0, times 0 [ 411.191714][T14169] CPU: 0 PID: 14169 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 411.202244][T14169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.212315][T14169] Call Trace: [ 411.215610][T14169] [ 411.218547][T14169] dump_stack_lvl+0xcd/0x134 [ 411.223169][T14169] should_fail.cold+0x5/0xa [ 411.227700][T14169] ? skb_clone+0x170/0x3c0 [ 411.232148][T14169] should_failslab+0x5/0x10 [ 411.236678][T14169] kmem_cache_alloc+0x5e/0x4b0 [ 411.241480][T14169] skb_clone+0x170/0x3c0 [ 411.245753][T14169] netlink_broadcast+0x9a6/0xd50 [ 411.250728][T14169] ? alloc_uevent_skb+0x1c2/0x210 [ 411.255782][T14169] kobject_uevent_env+0xaa8/0x1600 [ 411.260924][T14169] ? dev_fwnode+0x79/0x90 [ 411.265278][T14169] device_del+0x7f1/0xc80 [ 411.269635][T14169] ? __device_link_del+0x380/0x380 [ 411.274782][T14169] cdev_device_del+0x19/0x100 [ 411.279483][T14169] evdev_disconnect+0x3d/0xb0 [ 411.284187][T14169] __input_unregister_device+0x206/0x470 [ 411.289934][T14169] input_unregister_device+0xb4/0xf0 [ 411.295243][T14169] uinput_destroy_device+0x1f4/0x260 [ 411.300566][T14169] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 411.306496][T14169] ? uinput_write+0x11e0/0x11e0 [ 411.311381][T14169] ? __context_tracking_exit+0xb8/0xe0 [ 411.316876][T14169] ? __fget_files+0x28c/0x470 [ 411.321597][T14169] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 411.327864][T14169] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 411.334052][T14169] __x64_sys_ioctl+0x193/0x200 [ 411.338841][T14169] do_syscall_64+0x35/0xb0 [ 411.343277][T14169] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 411.349276][T14169] RIP: 0033:0x7f4825f54059 [ 411.353708][T14169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 411.373336][T14169] RSP: 002b:00007f48248c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.381775][T14169] RAX: ffffffffffffffda RBX: 00007f4826066f60 RCX: 00007f4825f54059 [ 411.389761][T14169] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 411.397836][T14169] RBP: 00007f48248c91d0 R08: 0000000000000000 R09: 0000000000000000 [ 411.405822][T14169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 411.413809][T14169] R13: 00007f482659ab1f R14: 00007f48248c9300 R15: 0000000000022000 [ 411.421818][T14169] [ 411.665489][ T3664] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.677492][ T3664] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 411.687036][ T3664] usb 3-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 411.696612][ T3664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.708604][ T3664] usb 3-1: config 0 descriptor?? 10:53:13 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009c1b5e4099042b10c0c70000000109021b000100000507000000000000"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x40, 0x8, 0x4, {0x4, 0x3, "221f"}}, &(0x7f0000000080)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}, &(0x7f00000001c0)={0x0, 0xf, 0x74, {0x5, 0xf, 0x74, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x9, 0xff00, 0x7, [0xff0030, 0xcf, 0xff, 0xff00, 0x0]}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x7, 0xf00f, 0x1000, [0xff3f00, 0xff0000, 0xc0, 0xffa000, 0xff00c0, 0xc000]}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x5, 0xf780, 0x1, [0xff0030, 0xff000f]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "934a7286aee32de0bd76a737617981d8"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x0, 0x6, 0x81, "7e9c77cf", "f23ed99f"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x4, 0x1f, 0x7, 0x7, 0x1ff, 0x3}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x5, 0x8b, "9a1b7cf5971b55fa02d9f517024ed1fa0cae0207839ae9f29a3cc9549372018d74674f66db3d3a5975ef3ab639c09ec71b60161c94a68985a59c501042766d55d0d3b21a2ecda6a406d8c7cd8120318fc43d976012c555cfde576e9b84b978babc17f4eb8104e53afd58998032ff78d01a78772cfa0af342b3d351594f3e7eb1449fd275a570d5f990cbe5"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x60, 0x10}}, &(0x7f00000004c0)={0x40, 0x7, 0x2}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000540)={0x40, 0xb, 0x2, "1946"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "70a6"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x1c, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xe0}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x4}}) 10:53:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xa) r1 = fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x237) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:13 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x7) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) 10:53:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 17) [ 413.540861][ T3672] usb 3-1: USB disconnect, device number 25 10:53:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:13 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 413.581177][T14177] input: syz1 as /devices/virtual/input/input462 [ 413.592927][T14179] input: syz1 as /devices/virtual/input/input463 [ 413.607055][T14178] input: syz1 as /devices/virtual/input/input465 10:53:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000001800000008aa6e4c3e05cf8e8a7f58c69242c6d9d3de066af22f54757b82af433980562152dbcba46bde81b9277bca29c257a8010b79d3f02db2140abfd1e82aaaf54c48063c94059b8e7c233eb282b05d815a6f34a7d52b71", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000080)={0xa, 0x4}, 0xc) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 413.670278][T14187] FAULT_INJECTION: forcing a failure. [ 413.670278][T14187] name failslab, interval 1, probability 0, space 0, times 0 [ 413.718571][T14187] CPU: 0 PID: 14187 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 413.729124][T14187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.739198][T14187] Call Trace: [ 413.742531][T14187] [ 413.745487][T14187] dump_stack_lvl+0xcd/0x134 [ 413.750109][T14187] should_fail.cold+0x5/0xa [ 413.754657][T14187] ? kobject_uevent_env+0x235/0x1600 [ 413.759970][T14187] should_failslab+0x5/0x10 [ 413.764504][T14187] kmem_cache_alloc_trace+0x55/0x3d0 [ 413.769824][T14187] ? dev_uevent_filter+0xd0/0xd0 [ 413.774788][T14187] kobject_uevent_env+0x235/0x1600 [ 413.780047][T14187] ? dev_fwnode+0x79/0x90 [ 413.784412][T14187] device_del+0x7f1/0xc80 [ 413.788779][T14187] ? __device_link_del+0x380/0x380 [ 413.793926][T14187] input_unregister_device+0xb4/0xf0 [ 413.799243][T14187] uinput_destroy_device+0x1f4/0x260 [ 413.804568][T14187] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 413.810501][T14187] ? uinput_write+0x11e0/0x11e0 [ 413.815455][T14187] ? __context_tracking_exit+0xb8/0xe0 [ 413.820955][T14187] ? __fget_files+0x28c/0x470 [ 413.825670][T14187] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 413.831953][T14187] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 413.838165][T14187] __x64_sys_ioctl+0x193/0x200 [ 413.842966][T14187] do_syscall_64+0x35/0xb0 [ 413.847403][T14187] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 413.853325][T14187] RIP: 0033:0x7f4825f54059 [ 413.857764][T14187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 413.877397][T14187] RSP: 002b:00007f48248a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.885836][T14187] RAX: ffffffffffffffda RBX: 00007f4826067030 RCX: 00007f4825f54059 [ 413.893830][T14187] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 413.901822][T14187] RBP: 00007f48248a81d0 R08: 0000000000000000 R09: 0000000000000000 [ 413.909815][T14187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:53:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:14 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x1ff, 0x6, 0x9fdf, 0x4f, 0x1}) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 413.917816][T14187] R13: 00007f482659ab1f R14: 00007f48248a8300 R15: 0000000000022000 [ 413.925945][T14187] [ 413.954642][T14195] input: syz1 as /devices/virtual/input/input467 [ 414.205397][ T3672] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 414.585655][ T3672] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.603983][ T3672] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 414.623302][ T3672] usb 3-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 414.642689][ T3672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.663136][ T3672] usb 3-1: config 0 descriptor?? 10:53:16 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009c1b5e4099042b10c0c70000000109021b000100000507000000000000"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x40, 0x8, 0x4, {0x4, 0x3, "221f"}}, &(0x7f0000000080)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}, &(0x7f00000001c0)={0x0, 0xf, 0x74, {0x5, 0xf, 0x74, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x9, 0xff00, 0x7, [0xff0030, 0xcf, 0xff, 0xff00, 0x0]}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x7, 0xf00f, 0x1000, [0xff3f00, 0xff0000, 0xc0, 0xffa000, 0xff00c0, 0xc000]}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x5, 0xf780, 0x1, [0xff0030, 0xff000f]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "934a7286aee32de0bd76a737617981d8"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x0, 0x6, 0x81, "7e9c77cf", "f23ed99f"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x4, 0x1f, 0x7, 0x7, 0x1ff, 0x3}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x5, 0x8b, "9a1b7cf5971b55fa02d9f517024ed1fa0cae0207839ae9f29a3cc9549372018d74674f66db3d3a5975ef3ab639c09ec71b60161c94a68985a59c501042766d55d0d3b21a2ecda6a406d8c7cd8120318fc43d976012c555cfde576e9b84b978babc17f4eb8104e53afd58998032ff78d01a78772cfa0af342b3d351594f3e7eb1449fd275a570d5f990cbe5"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x60, 0x10}}, &(0x7f00000004c0)={0x40, 0x7, 0x2}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000540)={0x40, 0xb, 0x2, "1946"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "70a6"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x1c, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xe0}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x4}}) 10:53:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 18) 10:53:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000001800000008aa6e4c3e05cf8e8a7f58c69242c6d9d3de066af22f54757b82af433980562152dbcba46bde81b9277bca29c257a8010b79d3f02db2140abfd1e82aaaf54c48063c94059b8e7c233eb282b05d815a6f34a7d52b71", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000080)={0xa, 0x4}, 0xc) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 10:53:16 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x1ff, 0x6, 0x9fdf, 0x4f, 0x1}) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') (async) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x1ff, 0x6, 0x9fdf, 0x4f, 0x1}) (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) [ 416.619690][ T34] usb 3-1: USB disconnect, device number 26 10:53:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000001800000008aa6e4c3e05cf8e8a7f58c69242c6d9d3de066af22f54757b82af433980562152dbcba46bde81b9277bca29c257a8010b79d3f02db2140abfd1e82aaaf54c48063c94059b8e7c233eb282b05d815a6f34a7d52b71", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000080)={0xa, 0x4}, 0xc) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000001800000008aa6e4c3e05cf8e8a7f58c69242c6d9d3de066af22f54757b82af433980562152dbcba46bde81b9277bca29c257a8010b79d3f02db2140abfd1e82aaaf54c48063c94059b8e7c233eb282b05d815a6f34a7d52b71", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000080)={0xa, 0x4}, 0xc) (async) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) [ 416.689707][T14210] input: syz1 as /devices/virtual/input/input471 [ 416.695920][T14216] input: syz1 as /devices/virtual/input/input472 [ 416.705648][T14212] input: syz1 as /devices/virtual/input/input473 10:53:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 10:53:17 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') (async) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x1ff, 0x6, 0x9fdf, 0x4f, 0x1}) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) 10:53:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 416.749020][T14212] FAULT_INJECTION: forcing a failure. [ 416.749020][T14212] name failslab, interval 1, probability 0, space 0, times 0 [ 416.759301][T14222] input: syz1 as /devices/virtual/input/input474 [ 416.812030][T14212] CPU: 1 PID: 14212 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 416.822581][T14212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.832657][T14212] Call Trace: [ 416.835948][T14212] [ 416.838895][T14212] dump_stack_lvl+0xcd/0x134 [ 416.843517][T14212] should_fail.cold+0x5/0xa [ 416.848047][T14212] ? kobject_get_path+0xbe/0x230 [ 416.849450][T14226] input: syz1 as /devices/virtual/input/input475 10:53:17 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="0c59eeeb5ad8bbd893be78aa9e8408db16995858d6089fdaac41958fff9b3f1b60d2f9ae91cb91731bff14ada650ed466c8d745b7653cc967f1913eafefe4d99efeb0146667e88f67a4f032c8f4cad98aade7a49a3", 0x55}, {&(0x7f0000000080)="c9bbc864d74884f7a09517fde6485b333560775c800bda61408012f6a2de4e469271258bbc26039d19179085a38c6a6b82370773c3", 0x35}, {&(0x7f00000002c0)="249f89038945c268ebd32d10423469019e99acdf46632284da0cfe829cec6f3ee06fe8c0653df59c87eae0be91094eecefc5df4f52a2d2870cfcc6afc7bd4e095456640b648033ca21186192bb1e8935e87c9dbefa93524382a55a94294e647772e291d48c5b08c23babcfcfc445fed6953dabf67a497cdaa9018cbc86582d2fe3d10dd9963eae2853f7c5cc5014f289864116ba6f4d2209e425db4f7e5125e40c66318dad0b355db05b7b97b2e1e592a460db6220b4a0701a97f7b7f60e96778f1403b4926664e7fb8bdf8ae4d4fd04c21389d54e2047d147e5c46df327e444763d3200904f29868a89e75eaf2bfb5b3114824b75a29d484d", 0xf9}, {&(0x7f00000000c0)="3199c476861aa41f595fecb32a5f807e9f378d0eaca8cfefe15ea2988640c8326868b71458e2739f0103b3ae9ca5958e1341622109849ae5f36d583e61af8c24354204b781cc8997996fbbb27de203d303fecf0cbc65173ab01f72b855b0827cca4910e3164e247d66d017da5818688785565f83b9475312d95b49828b463dad2d9ec7f33af1c47ce7e9583f4554a62185a0d0340ee6ed1b", 0x98}], 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 416.853007][T14212] should_failslab+0x5/0x10 [ 416.853046][T14212] __kmalloc+0x72/0x450 [ 416.853084][T14212] kobject_get_path+0xbe/0x230 [ 416.872817][T14212] kobject_uevent_env+0x259/0x1600 [ 416.878010][T14212] ? dev_fwnode+0x79/0x90 [ 416.882379][T14212] device_del+0x7f1/0xc80 [ 416.886736][T14212] ? __device_link_del+0x380/0x380 [ 416.891884][T14212] input_unregister_device+0xb4/0xf0 [ 416.897206][T14212] uinput_destroy_device+0x1f4/0x260 [ 416.902613][T14212] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 416.908541][T14212] ? uinput_write+0x11e0/0x11e0 [ 416.913524][T14212] ? __context_tracking_exit+0xb8/0xe0 [ 416.919022][T14212] ? __fget_files+0x28c/0x470 [ 416.924426][T14212] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 416.930702][T14212] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 416.936886][T14212] __x64_sys_ioctl+0x193/0x200 [ 416.941674][T14212] do_syscall_64+0x35/0xb0 [ 416.946109][T14212] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 416.952027][T14212] RIP: 0033:0x7f4825f54059 [ 416.956457][T14212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 416.976091][T14212] RSP: 002b:00007f48248c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.984531][T14212] RAX: ffffffffffffffda RBX: 00007f4826066f60 RCX: 00007f4825f54059 [ 416.992520][T14212] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 417.000511][T14212] RBP: 00007f48248c91d0 R08: 0000000000000000 R09: 0000000000000000 [ 417.008504][T14212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 417.016494][T14212] R13: 00007f482659ab1f R14: 00007f48248c9300 R15: 0000000000022000 [ 417.024511][T14212] 10:53:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) sendfile(r1, r1, 0x0, 0x5) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') write$uinput_user_dev(r2, &(0x7f0000000380)={'syz0\x00', {0x1, 0xff89, 0xffc0, 0x5}, 0x25, [0x3, 0x4, 0x9, 0xfffffff9, 0x0, 0xffffffc1, 0x1, 0x1, 0x1, 0xff, 0x4aa, 0x3, 0x74, 0x463, 0x7, 0x3, 0x1f, 0x0, 0x800, 0x4, 0xfffffeff, 0x3, 0x101, 0x100, 0x80, 0x2, 0x1, 0x200, 0x7, 0x12e, 0x7, 0xe830, 0x3, 0x0, 0xfffffff9, 0x1, 0x0, 0x8335, 0x1ff, 0x100, 0x7, 0x1ff, 0xfffff001, 0x8, 0x0, 0x1f, 0x4, 0x79f, 0x6, 0x6, 0x0, 0x9, 0xb6, 0x7f, 0x10000, 0xfffffffc, 0x63d, 0x3, 0xffffffff, 0x1f, 0x6, 0xff, 0xbc, 0x8d], [0x81, 0x3, 0x7fffffff, 0x1, 0x3, 0x0, 0x80, 0x0, 0x6, 0x800, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x1, 0x4, 0x54b, 0xde90, 0x6, 0x3ff, 0x6, 0x9, 0x80000001, 0x5, 0x7, 0x10000, 0x3f, 0x0, 0x0, 0x81fc, 0x7, 0x6, 0x3, 0x98e0, 0x0, 0x8, 0x2, 0x6, 0x0, 0x9, 0x4, 0x80, 0xffffffff, 0x8000, 0xd5, 0x6220, 0x0, 0x1, 0x8, 0x5, 0x800, 0x5, 0x7, 0x1, 0x2, 0xa46, 0x6, 0x5, 0x2, 0x400, 0x95, 0x8, 0x3], [0x7, 0x2, 0x4, 0x9, 0x3f, 0x0, 0x66, 0x1, 0x0, 0x2, 0x140, 0xfffffffe, 0x40, 0xffff, 0x401, 0xeb, 0x7fff, 0x9, 0x7, 0x1, 0x4, 0x1, 0x5, 0x3, 0xfffffff7, 0x80, 0x2e79ff0e, 0x0, 0xffffff80, 0x7, 0x6, 0x9, 0x8001, 0x800, 0x5, 0x4, 0x9, 0x81, 0x7, 0x1, 0xf4ce, 0x401, 0x3, 0x3b25, 0xfffffffe, 0xe3eb, 0xffffffff, 0xffffff55, 0x208e891, 0x82c4, 0x36, 0x7, 0x5, 0x6, 0x4, 0xb18e, 0x85c, 0x7, 0x6, 0x40, 0x2, 0x1, 0x401, 0x6], [0x4, 0x1ff, 0x7fff, 0x20, 0x9, 0x1, 0x80000001, 0x6, 0x4, 0x1, 0x7, 0x9, 0x4, 0x3570, 0x100, 0x96, 0x0, 0x2, 0x200, 0x1, 0x1, 0xfffff000, 0x6dc, 0x27, 0x11bc, 0x0, 0x3, 0x2, 0x2, 0x8000, 0x6, 0xfffffffa, 0x0, 0x1f, 0x40, 0x100, 0x8, 0xfffffffe, 0x7ff, 0xf764, 0x80000001, 0xfffeffff, 0x5, 0x800, 0x8e2, 0x1000, 0x81, 0x1, 0x4, 0x4, 0xdd, 0xffff571f, 0x2, 0xfffffffc, 0x6, 0x100, 0x7949, 0x81, 0x8, 0x800, 0x5, 0x8, 0x7426, 0x100]}, 0x45c) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) [ 417.168859][T14243] input: syz1 as /devices/virtual/input/input477 [ 417.335418][ T34] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 417.725517][ T34] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.745260][ T34] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 417.754398][ T34] usb 3-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 417.785274][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.806507][ T34] usb 3-1: config 0 descriptor?? 10:53:19 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000040)) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) 10:53:19 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="0c59eeeb5ad8bbd893be78aa9e8408db16995858d6089fdaac41958fff9b3f1b60d2f9ae91cb91731bff14ada650ed466c8d745b7653cc967f1913eafefe4d99efeb0146667e88f67a4f032c8f4cad98aade7a49a3", 0x55}, {&(0x7f0000000080)="c9bbc864d74884f7a09517fde6485b333560775c800bda61408012f6a2de4e469271258bbc26039d19179085a38c6a6b82370773c3", 0x35}, {&(0x7f00000002c0)="249f89038945c268ebd32d10423469019e99acdf46632284da0cfe829cec6f3ee06fe8c0653df59c87eae0be91094eecefc5df4f52a2d2870cfcc6afc7bd4e095456640b648033ca21186192bb1e8935e87c9dbefa93524382a55a94294e647772e291d48c5b08c23babcfcfc445fed6953dabf67a497cdaa9018cbc86582d2fe3d10dd9963eae2853f7c5cc5014f289864116ba6f4d2209e425db4f7e5125e40c66318dad0b355db05b7b97b2e1e592a460db6220b4a0701a97f7b7f60e96778f1403b4926664e7fb8bdf8ae4d4fd04c21389d54e2047d147e5c46df327e444763d3200904f29868a89e75eaf2bfb5b3114824b75a29d484d", 0xf9}, {&(0x7f00000000c0)="3199c476861aa41f595fecb32a5f807e9f378d0eaca8cfefe15ea2988640c8326868b71458e2739f0103b3ae9ca5958e1341622109849ae5f36d583e61af8c24354204b781cc8997996fbbb27de203d303fecf0cbc65173ab01f72b855b0827cca4910e3164e247d66d017da5818688785565f83b9475312d95b49828b463dad2d9ec7f33af1c47ce7e9583f4554a62185a0d0340ee6ed1b", 0x98}], 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="0c59eeeb5ad8bbd893be78aa9e8408db16995858d6089fdaac41958fff9b3f1b60d2f9ae91cb91731bff14ada650ed466c8d745b7653cc967f1913eafefe4d99efeb0146667e88f67a4f032c8f4cad98aade7a49a3", 0x55}, {&(0x7f0000000080)="c9bbc864d74884f7a09517fde6485b333560775c800bda61408012f6a2de4e469271258bbc26039d19179085a38c6a6b82370773c3", 0x35}, {&(0x7f00000002c0)="249f89038945c268ebd32d10423469019e99acdf46632284da0cfe829cec6f3ee06fe8c0653df59c87eae0be91094eecefc5df4f52a2d2870cfcc6afc7bd4e095456640b648033ca21186192bb1e8935e87c9dbefa93524382a55a94294e647772e291d48c5b08c23babcfcfc445fed6953dabf67a497cdaa9018cbc86582d2fe3d10dd9963eae2853f7c5cc5014f289864116ba6f4d2209e425db4f7e5125e40c66318dad0b355db05b7b97b2e1e592a460db6220b4a0701a97f7b7f60e96778f1403b4926664e7fb8bdf8ae4d4fd04c21389d54e2047d147e5c46df327e444763d3200904f29868a89e75eaf2bfb5b3114824b75a29d484d", 0xf9}, {&(0x7f00000000c0)="3199c476861aa41f595fecb32a5f807e9f378d0eaca8cfefe15ea2988640c8326868b71458e2739f0103b3ae9ca5958e1341622109849ae5f36d583e61af8c24354204b781cc8997996fbbb27de203d303fecf0cbc65173ab01f72b855b0827cca4910e3164e247d66d017da5818688785565f83b9475312d95b49828b463dad2d9ec7f33af1c47ce7e9583f4554a62185a0d0340ee6ed1b", 0x98}], 0x4) (async) syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) 10:53:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 10:53:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 19) 10:53:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) sendfile(r1, r1, 0x0, 0x5) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') write$uinput_user_dev(r2, &(0x7f0000000380)={'syz0\x00', {0x1, 0xff89, 0xffc0, 0x5}, 0x25, [0x3, 0x4, 0x9, 0xfffffff9, 0x0, 0xffffffc1, 0x1, 0x1, 0x1, 0xff, 0x4aa, 0x3, 0x74, 0x463, 0x7, 0x3, 0x1f, 0x0, 0x800, 0x4, 0xfffffeff, 0x3, 0x101, 0x100, 0x80, 0x2, 0x1, 0x200, 0x7, 0x12e, 0x7, 0xe830, 0x3, 0x0, 0xfffffff9, 0x1, 0x0, 0x8335, 0x1ff, 0x100, 0x7, 0x1ff, 0xfffff001, 0x8, 0x0, 0x1f, 0x4, 0x79f, 0x6, 0x6, 0x0, 0x9, 0xb6, 0x7f, 0x10000, 0xfffffffc, 0x63d, 0x3, 0xffffffff, 0x1f, 0x6, 0xff, 0xbc, 0x8d], [0x81, 0x3, 0x7fffffff, 0x1, 0x3, 0x0, 0x80, 0x0, 0x6, 0x800, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x1, 0x4, 0x54b, 0xde90, 0x6, 0x3ff, 0x6, 0x9, 0x80000001, 0x5, 0x7, 0x10000, 0x3f, 0x0, 0x0, 0x81fc, 0x7, 0x6, 0x3, 0x98e0, 0x0, 0x8, 0x2, 0x6, 0x0, 0x9, 0x4, 0x80, 0xffffffff, 0x8000, 0xd5, 0x6220, 0x0, 0x1, 0x8, 0x5, 0x800, 0x5, 0x7, 0x1, 0x2, 0xa46, 0x6, 0x5, 0x2, 0x400, 0x95, 0x8, 0x3], [0x7, 0x2, 0x4, 0x9, 0x3f, 0x0, 0x66, 0x1, 0x0, 0x2, 0x140, 0xfffffffe, 0x40, 0xffff, 0x401, 0xeb, 0x7fff, 0x9, 0x7, 0x1, 0x4, 0x1, 0x5, 0x3, 0xfffffff7, 0x80, 0x2e79ff0e, 0x0, 0xffffff80, 0x7, 0x6, 0x9, 0x8001, 0x800, 0x5, 0x4, 0x9, 0x81, 0x7, 0x1, 0xf4ce, 0x401, 0x3, 0x3b25, 0xfffffffe, 0xe3eb, 0xffffffff, 0xffffff55, 0x208e891, 0x82c4, 0x36, 0x7, 0x5, 0x6, 0x4, 0xb18e, 0x85c, 0x7, 0x6, 0x40, 0x2, 0x1, 0x401, 0x6], [0x4, 0x1ff, 0x7fff, 0x20, 0x9, 0x1, 0x80000001, 0x6, 0x4, 0x1, 0x7, 0x9, 0x4, 0x3570, 0x100, 0x96, 0x0, 0x2, 0x200, 0x1, 0x1, 0xfffff000, 0x6dc, 0x27, 0x11bc, 0x0, 0x3, 0x2, 0x2, 0x8000, 0x6, 0xfffffffa, 0x0, 0x1f, 0x40, 0x100, 0x8, 0xfffffffe, 0x7ff, 0xf764, 0x80000001, 0xfffeffff, 0x5, 0x800, 0x8e2, 0x1000, 0x81, 0x1, 0x4, 0x4, 0xdd, 0xffff571f, 0x2, 0xfffffffc, 0x6, 0x100, 0x7949, 0x81, 0x8, 0x800, 0x5, 0x8, 0x7426, 0x100]}, 0x45c) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) [ 419.684323][ T3678] usb 3-1: USB disconnect, device number 27 [ 419.733073][T14248] input: syz1 as /devices/virtual/input/input478 [ 419.757145][T14251] input: syz1 as /devices/virtual/input/input480 [ 419.761942][T14254] input: syz1 as /devices/virtual/input/input481 [ 419.771408][T14246] input: syz1 as /devices/virtual/input/input479 [ 419.800682][T14263] FAULT_INJECTION: forcing a failure. [ 419.800682][T14263] name failslab, interval 1, probability 0, space 0, times 0 [ 419.852837][T14263] CPU: 1 PID: 14263 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 419.863563][T14263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.873644][T14263] Call Trace: [ 419.876947][T14263] [ 419.879892][T14263] dump_stack_lvl+0xcd/0x134 [ 419.884515][T14263] should_fail.cold+0x5/0xa [ 419.889051][T14263] should_failslab+0x5/0x10 [ 419.893592][T14263] kmem_cache_alloc_node+0x65/0x4f0 [ 419.898822][T14263] ? __alloc_skb+0x215/0x340 [ 419.903453][T14263] __alloc_skb+0x215/0x340 [ 419.907906][T14263] alloc_uevent_skb+0x7b/0x210 [ 419.912707][T14263] kobject_uevent_env+0xadf/0x1600 [ 419.917862][T14263] ? dev_fwnode+0x79/0x90 [ 419.922225][T14263] device_del+0x7f1/0xc80 [ 419.926589][T14263] ? __device_link_del+0x380/0x380 [ 419.931743][T14263] input_unregister_device+0xb4/0xf0 [ 419.937066][T14263] uinput_destroy_device+0x1f4/0x260 [ 419.942392][T14263] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 419.948323][T14263] ? uinput_write+0x11e0/0x11e0 [ 419.953213][T14263] ? __context_tracking_exit+0xb8/0xe0 [ 419.958714][T14263] ? __fget_files+0x28c/0x470 [ 419.963436][T14263] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 419.969717][T14263] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 419.975912][T14263] __x64_sys_ioctl+0x193/0x200 [ 419.980708][T14263] do_syscall_64+0x35/0xb0 [ 419.985157][T14263] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 419.991073][T14263] RIP: 0033:0x7f4825f54059 [ 419.995506][T14263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 420.015133][T14263] RSP: 002b:00007f48248a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.023576][T14263] RAX: ffffffffffffffda RBX: 00007f4826067030 RCX: 00007f4825f54059 [ 420.031570][T14263] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 420.039564][T14263] RBP: 00007f48248a81d0 R08: 0000000000000000 R09: 0000000000000000 10:53:20 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="0c59eeeb5ad8bbd893be78aa9e8408db16995858d6089fdaac41958fff9b3f1b60d2f9ae91cb91731bff14ada650ed466c8d745b7653cc967f1913eafefe4d99efeb0146667e88f67a4f032c8f4cad98aade7a49a3", 0x55}, {&(0x7f0000000080)="c9bbc864d74884f7a09517fde6485b333560775c800bda61408012f6a2de4e469271258bbc26039d19179085a38c6a6b82370773c3", 0x35}, {&(0x7f00000002c0)="249f89038945c268ebd32d10423469019e99acdf46632284da0cfe829cec6f3ee06fe8c0653df59c87eae0be91094eecefc5df4f52a2d2870cfcc6afc7bd4e095456640b648033ca21186192bb1e8935e87c9dbefa93524382a55a94294e647772e291d48c5b08c23babcfcfc445fed6953dabf67a497cdaa9018cbc86582d2fe3d10dd9963eae2853f7c5cc5014f289864116ba6f4d2209e425db4f7e5125e40c66318dad0b355db05b7b97b2e1e592a460db6220b4a0701a97f7b7f60e96778f1403b4926664e7fb8bdf8ae4d4fd04c21389d54e2047d147e5c46df327e444763d3200904f29868a89e75eaf2bfb5b3114824b75a29d484d", 0xf9}, {&(0x7f00000000c0)="3199c476861aa41f595fecb32a5f807e9f378d0eaca8cfefe15ea2988640c8326868b71458e2739f0103b3ae9ca5958e1341622109849ae5f36d583e61af8c24354204b781cc8997996fbbb27de203d303fecf0cbc65173ab01f72b855b0827cca4910e3164e247d66d017da5818688785565f83b9475312d95b49828b463dad2d9ec7f33af1c47ce7e9583f4554a62185a0d0340ee6ed1b", 0x98}], 0x4) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) 10:53:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) sendfile(r1, r1, 0x0, 0x5) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') write$uinput_user_dev(r2, &(0x7f0000000380)={'syz0\x00', {0x1, 0xff89, 0xffc0, 0x5}, 0x25, [0x3, 0x4, 0x9, 0xfffffff9, 0x0, 0xffffffc1, 0x1, 0x1, 0x1, 0xff, 0x4aa, 0x3, 0x74, 0x463, 0x7, 0x3, 0x1f, 0x0, 0x800, 0x4, 0xfffffeff, 0x3, 0x101, 0x100, 0x80, 0x2, 0x1, 0x200, 0x7, 0x12e, 0x7, 0xe830, 0x3, 0x0, 0xfffffff9, 0x1, 0x0, 0x8335, 0x1ff, 0x100, 0x7, 0x1ff, 0xfffff001, 0x8, 0x0, 0x1f, 0x4, 0x79f, 0x6, 0x6, 0x0, 0x9, 0xb6, 0x7f, 0x10000, 0xfffffffc, 0x63d, 0x3, 0xffffffff, 0x1f, 0x6, 0xff, 0xbc, 0x8d], [0x81, 0x3, 0x7fffffff, 0x1, 0x3, 0x0, 0x80, 0x0, 0x6, 0x800, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x1, 0x4, 0x54b, 0xde90, 0x6, 0x3ff, 0x6, 0x9, 0x80000001, 0x5, 0x7, 0x10000, 0x3f, 0x0, 0x0, 0x81fc, 0x7, 0x6, 0x3, 0x98e0, 0x0, 0x8, 0x2, 0x6, 0x0, 0x9, 0x4, 0x80, 0xffffffff, 0x8000, 0xd5, 0x6220, 0x0, 0x1, 0x8, 0x5, 0x800, 0x5, 0x7, 0x1, 0x2, 0xa46, 0x6, 0x5, 0x2, 0x400, 0x95, 0x8, 0x3], [0x7, 0x2, 0x4, 0x9, 0x3f, 0x0, 0x66, 0x1, 0x0, 0x2, 0x140, 0xfffffffe, 0x40, 0xffff, 0x401, 0xeb, 0x7fff, 0x9, 0x7, 0x1, 0x4, 0x1, 0x5, 0x3, 0xfffffff7, 0x80, 0x2e79ff0e, 0x0, 0xffffff80, 0x7, 0x6, 0x9, 0x8001, 0x800, 0x5, 0x4, 0x9, 0x81, 0x7, 0x1, 0xf4ce, 0x401, 0x3, 0x3b25, 0xfffffffe, 0xe3eb, 0xffffffff, 0xffffff55, 0x208e891, 0x82c4, 0x36, 0x7, 0x5, 0x6, 0x4, 0xb18e, 0x85c, 0x7, 0x6, 0x40, 0x2, 0x1, 0x401, 0x6], [0x4, 0x1ff, 0x7fff, 0x20, 0x9, 0x1, 0x80000001, 0x6, 0x4, 0x1, 0x7, 0x9, 0x4, 0x3570, 0x100, 0x96, 0x0, 0x2, 0x200, 0x1, 0x1, 0xfffff000, 0x6dc, 0x27, 0x11bc, 0x0, 0x3, 0x2, 0x2, 0x8000, 0x6, 0xfffffffa, 0x0, 0x1f, 0x40, 0x100, 0x8, 0xfffffffe, 0x7ff, 0xf764, 0x80000001, 0xfffeffff, 0x5, 0x800, 0x8e2, 0x1000, 0x81, 0x1, 0x4, 0x4, 0xdd, 0xffff571f, 0x2, 0xfffffffc, 0x6, 0x100, 0x7949, 0x81, 0x8, 0x800, 0x5, 0x8, 0x7426, 0x100]}, 0x45c) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) [ 420.047556][T14263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 420.055550][T14263] R13: 00007f482659ab1f R14: 00007f48248a8300 R15: 0000000000022000 [ 420.063562][T14263] 10:53:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 420.171427][T14272] input: syz1 as /devices/virtual/input/input482 [ 420.205408][ T3678] usb 3-1: new high-speed USB device number 28 using dummy_hcd 10:53:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 20) 10:53:20 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x10, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) dup(r1) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) [ 420.222267][T14273] input: syz1 as /devices/virtual/input/input483 [ 420.300470][T14276] input: syz1 as /devices/virtual/input/input484 [ 420.341880][T14282] input: syz1 as /devices/virtual/input/input485 [ 420.475474][T14283] FAULT_INJECTION: forcing a failure. [ 420.475474][T14283] name failslab, interval 1, probability 0, space 0, times 0 [ 420.491131][T14283] CPU: 0 PID: 14283 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 420.501679][T14283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.511760][T14283] Call Trace: [ 420.515051][T14283] [ 420.517993][T14283] dump_stack_lvl+0xcd/0x134 [ 420.522614][T14283] should_fail.cold+0x5/0xa [ 420.527136][T14283] should_failslab+0x5/0x10 [ 420.531640][T14283] kmem_cache_alloc_node+0x65/0x4f0 [ 420.536835][T14283] ? __alloc_skb+0x215/0x340 [ 420.541424][T14283] __alloc_skb+0x215/0x340 [ 420.545837][T14283] alloc_uevent_skb+0x7b/0x210 [ 420.550601][T14283] kobject_uevent_env+0xadf/0x1600 [ 420.555723][T14283] ? dev_fwnode+0x79/0x90 [ 420.560049][T14283] device_del+0x7f1/0xc80 [ 420.564391][T14283] ? __device_link_del+0x380/0x380 [ 420.569505][T14283] input_unregister_device+0xb4/0xf0 [ 420.574801][T14283] uinput_destroy_device+0x1f4/0x260 [ 420.580093][T14283] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 420.586008][T14283] ? uinput_write+0x11e0/0x11e0 [ 420.590865][T14283] ? __context_tracking_exit+0xb8/0xe0 [ 420.596326][T14283] ? __fget_files+0x28c/0x470 [ 420.601001][T14283] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 420.607238][T14283] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 420.613387][T14283] __x64_sys_ioctl+0x193/0x200 [ 420.618156][T14283] do_syscall_64+0x35/0xb0 [ 420.622566][T14283] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 420.628580][T14283] RIP: 0033:0x7f4825f54059 [ 420.633014][T14283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 420.652613][T14283] RSP: 002b:00007f48248a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.661044][T14283] RAX: ffffffffffffffda RBX: 00007f4826067030 RCX: 00007f4825f54059 [ 420.669009][T14283] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 420.677233][T14283] RBP: 00007f48248a81d0 R08: 0000000000000000 R09: 0000000000000000 [ 420.685204][T14283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 420.693179][T14283] R13: 00007f482659ab1f R14: 00007f48248a8300 R15: 0000000000022000 [ 420.701155][T14283] [ 420.755543][ T3678] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 420.775291][ T3678] usb 3-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 420.784359][ T3678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.819536][ T3678] usb 3-1: config 0 descriptor?? [ 420.859253][ T3678] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 421.064011][ T34] usb 3-1: USB disconnect, device number 28 10:53:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:21 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x10, r0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) (async) dup(r1) (async) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) 10:53:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 21) 10:53:21 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000040)) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) 10:53:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 421.629080][T14290] input: syz1 as /devices/virtual/input/input486 [ 421.636900][T14295] input: syz1 as /devices/virtual/input/input488 [ 421.646247][T14291] input: syz1 as /devices/virtual/input/input489 10:53:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) 10:53:21 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x10, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x1}, 0x20) dup(r1) (async) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) 10:53:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 421.702834][T14295] FAULT_INJECTION: forcing a failure. [ 421.702834][T14295] name failslab, interval 1, probability 0, space 0, times 0 [ 421.765422][T14295] CPU: 0 PID: 14295 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 421.775976][T14295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.786050][T14295] Call Trace: [ 421.789337][T14295] [ 421.792275][T14295] dump_stack_lvl+0xcd/0x134 [ 421.796894][T14295] should_fail.cold+0x5/0xa [ 421.801428][T14295] ? skb_clone+0x170/0x3c0 [ 421.805890][T14295] should_failslab+0x5/0x10 [ 421.810427][T14295] kmem_cache_alloc+0x5e/0x4b0 [ 421.815237][T14295] skb_clone+0x170/0x3c0 [ 421.819514][T14295] netlink_broadcast+0x9a6/0xd50 [ 421.824487][T14295] ? alloc_uevent_skb+0x1c2/0x210 [ 421.829542][T14295] kobject_uevent_env+0xaa8/0x1600 [ 421.834682][T14295] ? dev_fwnode+0x79/0x90 [ 421.839035][T14295] device_del+0x7f1/0xc80 [ 421.843387][T14295] ? __device_link_del+0x380/0x380 [ 421.848531][T14295] input_unregister_device+0xb4/0xf0 [ 421.853837][T14295] uinput_destroy_device+0x1f4/0x260 [ 421.859153][T14295] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 421.865082][T14295] ? uinput_write+0x11e0/0x11e0 [ 421.869965][T14295] ? __context_tracking_exit+0xb8/0xe0 [ 421.875464][T14295] ? __fget_files+0x28c/0x470 [ 421.880175][T14295] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 421.886440][T14295] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 421.892626][T14295] __x64_sys_ioctl+0x193/0x200 [ 421.897415][T14295] do_syscall_64+0x35/0xb0 [ 421.901853][T14295] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 421.907761][T14295] RIP: 0033:0x7f4825f54059 [ 421.912192][T14295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 421.931814][T14295] RSP: 002b:00007f48248c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.940249][T14295] RAX: ffffffffffffffda RBX: 00007f4826066f60 RCX: 00007f4825f54059 [ 421.948233][T14295] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 421.956214][T14295] RBP: 00007f48248c91d0 R08: 0000000000000000 R09: 0000000000000000 10:53:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 421.964200][T14295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 421.972185][T14295] R13: 00007f482659ab1f R14: 00007f48248c9300 R15: 0000000000022000 [ 421.980275][T14295] [ 422.022467][T14309] input: syz1 as /devices/virtual/input/input492 [ 422.035728][T14312] input: syz1 as /devices/virtual/input/input493 10:53:22 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f00004c0000/0x4000)=nil, &(0x7f00006a7000/0x1000)=nil, 0x4000, 0x1}) 10:53:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 422.063090][T14318] input: syz1 as /devices/virtual/input/input494 10:53:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 422.145579][ T5827] usb 3-1: new high-speed USB device number 29 using dummy_hcd 10:53:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 22) [ 422.194983][T14324] input: syz1 as /devices/virtual/input/input495 [ 422.236430][T14327] input: syz1 as /devices/virtual/input/input496 [ 422.255150][T14331] input: syz1 as /devices/virtual/input/input498 [ 422.276333][T14331] FAULT_INJECTION: forcing a failure. [ 422.276333][T14331] name failslab, interval 1, probability 0, space 0, times 0 [ 422.289837][T14331] CPU: 1 PID: 14331 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 422.300408][T14331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.310485][T14331] Call Trace: [ 422.313775][T14331] [ 422.316720][T14331] dump_stack_lvl+0xcd/0x134 [ 422.321330][T14331] should_fail.cold+0x5/0xa [ 422.325844][T14331] should_failslab+0x5/0x10 [ 422.330363][T14331] __kmalloc_node_track_caller+0x7d/0x470 [ 422.336091][T14331] ? alloc_uevent_skb+0x7b/0x210 [ 422.341046][T14331] __alloc_skb+0xde/0x340 [ 422.345394][T14331] alloc_uevent_skb+0x7b/0x210 [ 422.350165][T14331] kobject_uevent_env+0xadf/0x1600 [ 422.355287][T14331] ? dev_fwnode+0x79/0x90 [ 422.359629][T14331] device_del+0x7f1/0xc80 [ 422.363966][T14331] ? __device_link_del+0x380/0x380 [ 422.369093][T14331] input_unregister_device+0xb4/0xf0 [ 422.374385][T14331] uinput_destroy_device+0x1f4/0x260 [ 422.379687][T14331] uinput_ioctl_handler.isra.0+0x143/0x1dc0 [ 422.385596][T14331] ? uinput_write+0x11e0/0x11e0 [ 422.390465][T14331] ? __context_tracking_exit+0xb8/0xe0 [ 422.395941][T14331] ? __fget_files+0x28c/0x470 [ 422.400629][T14331] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 422.406879][T14331] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 422.413048][T14331] __x64_sys_ioctl+0x193/0x200 [ 422.417822][T14331] do_syscall_64+0x35/0xb0 [ 422.422257][T14331] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 422.428152][T14331] RIP: 0033:0x7f4825f54059 [ 422.432569][T14331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 422.452200][T14331] RSP: 002b:00007f48248c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.460615][T14331] RAX: ffffffffffffffda RBX: 00007f4826066f60 RCX: 00007f4825f54059 [ 422.468584][T14331] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 422.476553][T14331] RBP: 00007f48248c91d0 R08: 0000000000000000 R09: 0000000000000000 10:53:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 422.484524][T14331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 422.492492][T14331] R13: 00007f482659ab1f R14: 00007f48248c9300 R15: 0000000000022000 [ 422.500479][T14331] [ 422.554463][T14334] input: syz1 as /devices/virtual/input/input499 [ 422.705594][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 422.725306][ T5827] usb 3-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 422.734388][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.758635][ T5827] usb 3-1: config 0 descriptor?? [ 422.808647][ T5827] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 423.006919][ T3664] usb 3-1: USB disconnect, device number 29 10:53:23 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000040)) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) 10:53:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea83]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 23) 10:53:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:23 executing program 1: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) 10:53:23 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f00004c0000/0x4000)=nil, &(0x7f00006a7000/0x1000)=nil, 0x4000, 0x1}) [ 423.537290][T14336] input: syz1 as /devices/virtual/input/input500 [ 423.569000][T14344] input: syz1 as /devices/virtual/input/input502 [ 423.571520][T14345] input: syz1 as /devices/virtual/input/input501 [ 423.610152][T14344] FAULT_INJECTION: forcing a failure. [ 423.610152][T14344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.655307][T14344] CPU: 1 PID: 14344 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 [ 423.665865][T14344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.675947][T14344] Call Trace: [ 423.679239][T14344] [ 423.682182][T14344] dump_stack_lvl+0xcd/0x134 [ 423.686802][T14344] should_fail.cold+0x5/0xa [ 423.691340][T14344] _copy_from_user+0x2c/0x180 [ 423.696045][T14344] kstrtouint_from_user+0xa8/0x190 [ 423.701183][T14344] ? kstrtouint+0x120/0x120 [ 423.705715][T14344] ? lock_release+0x720/0x720 [ 423.710431][T14344] proc_fail_nth_write+0x79/0x220 [ 423.715486][T14344] ? proc_task_getattr+0x1f0/0x1f0 [ 423.720639][T14344] ? proc_task_getattr+0x1f0/0x1f0 [ 423.725775][T14344] vfs_write+0x28e/0xae0 [ 423.730050][T14344] ksys_write+0x12d/0x250 [ 423.734417][T14344] ? __ia32_sys_read+0xb0/0xb0 [ 423.739260][T14344] ? syscall_enter_from_user_mode+0x21/0x70 [ 423.745191][T14344] do_syscall_64+0x35/0xb0 [ 423.749629][T14344] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 423.755554][T14344] RIP: 0033:0x7f4825f06b6f [ 423.759986][T14344] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 423.779618][T14344] RSP: 002b:00007f48248c9160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 423.788058][T14344] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4825f06b6f [ 423.796052][T14344] RDX: 0000000000000001 RSI: 00007f48248c91e0 RDI: 0000000000000005 10:53:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea83]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 423.804041][T14344] RBP: 00007f48248c91d0 R08: 0000000000000000 R09: 0000000000000000 [ 423.812031][T14344] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 423.820020][T14344] R13: 00007f482659ab1f R14: 00007f48248c9300 R15: 0000000000022000 [ 423.828026][T14344] 10:53:24 executing program 0: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000003940)={0x0, 0x0, &(0x7f00000026c0)={0x0, 0x20}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001fff00"/20, @ANYRES32=r6, @ANYBLOB="e3ffffff00000000140012800b000100626174616476"], 0x68}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) 10:53:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 423.849837][T14356] input: syz1 as /devices/virtual/input/input503 10:53:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea83]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 423.960175][T14361] input: syz1 as /devices/virtual/input/input504 [ 423.974592][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 10:53:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 424.012898][T14359] device batadv2 entered promiscuous mode [ 424.044708][T14363] input: syz1 as /devices/virtual/input/input505 10:53:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 424.077878][T14359] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 424.114635][T14365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 424.135317][ T5827] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 424.136752][T14368] input: syz1 as /devices/virtual/input/input506 [ 424.152105][T14365] batman_adv: batadv2: Adding interface: macvlan2 [ 424.178623][T14369] input: syz1 as /devices/virtual/input/input507 [ 424.255440][T14365] batman_adv: batadv2: The MTU of interface macvlan2 is too small (0) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.316169][T14365] batman_adv: batadv2: Interface activated: macvlan2 [ 424.325495][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.338817][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.351632][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.364436][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.377240][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.390018][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.402828][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.415661][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.428473][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.441246][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.685891][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 424.706075][ T5827] usb 3-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 424.745391][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.783655][ T5827] usb 3-1: config 0 descriptor?? [ 424.858873][ T5827] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 425.056943][ T5827] usb 3-1: USB disconnect, device number 30 10:53:25 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x57, {0x57, 0x10, "8904f13f883168be16df10419a0d41389ed9b39eb1a5db62d42ce9f8b92225eb937a246f21dabe5302c08727c01790f022566ad69e8a097d48379ec4763bb0cb0e2b47a830bd5d8932d943fcac70e851ddb5977bc0"}}, &(0x7f00000000c0)={0x0, 0x3, 0xe1, @string={0xe1, 0x3, "af53e7db42fe58aa56ca60e18636eba38599286ec8970c000103674cdb65647b136b99f09dd9dcb8d482a9e12a855da522dabf6da6f39a04deaa21dfe179a75189273b9319a846928d37f6747a6941bdb30c2171104bf53ac91e84469b546e7d755922bba27fc25d58570d672c483c4d75354b2c0c929907d7d2b3369e2f36f4a421ef41dbc579c05a9d0863c7b30e20f03543cb0301dc31a3978726ed4af0b399fd053ce378bd6ef34d4ea3f0933a9405eccbb81ae3b34d3e52d263b874b0ec3a5960f4e084105f2a288959aa65620ee804cd03b0e9244702887f1c08ded6"}}, &(0x7f00000001c0)={0x0, 0xf, 0x54, {0x5, 0xf, 0x54, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x3f, 0x9, 0x4, 0x4}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x27, 0x9d, 0x7f}, @ss_container_id={0x14, 0x10, 0x4, 0xfd, "21745d164ef580f1c30a8347b57df063"}, @ssp_cap={0x20, 0x10, 0xa, 0x9a, 0x5, 0xc1be, 0xf0f, 0x20, [0xff, 0xffff30, 0xff000f, 0xc0c0, 0xff00]}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0x8, 0x7, "19c4c38a", "b2018f46"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb6, 0x60, 0x0, 0xff, 0x6, 0x400}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x40, 0xd, 0xd8, "e942fa20319e9400d6b60e793539971bc1961e3234d482dc1411cfdff24d0ff94b8c0bb6fe91b28974b073bbfad0b28ee48dc58761d3989493dcc36ae10ac36f8e6bb4d474aee2878369f4e1e00aa1c038d452fec18e1d0bb2b3041306233cd9fd3f0d343a129a34957c4cbbccee45f8f90c1f5ca30b371af02051872ae403987428c425b38f6c21588815d61270bdd92ea2d0628d18b4383c9411a320678f65d3ca7523e6094cfbdbc600aac23bc2897378aaaa5c8af611203a5daa98c2101a06646b100cddfd524580b357abd34e9e4fcec5ae988621e2"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x32}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x92}, &(0x7f0000000480)={0x20, 0x0, 0x4}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xcf}, &(0x7f0000000580)={0x40, 0xb, 0x2, "40fb"}, &(0x7f00000005c0)={0x40, 0xf, 0x2}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "cd9d"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x42}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x9}}) 10:53:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ec], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x9fb4, 0x81, 0x3, 0x81}, 'syz1\x00', 0x52}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:53:25 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c460806053f4b000000000000000200030000020000a301000000000000400000000000000007010000000000004c280000060038000100a9e30000ff0701000000000200000100000000000000c927eb5f000000000100001d1cfc108006000000000000000101000000000000a706000000000000060000005ed600000000000000000000688005160000000003000000000000000200000000000000090000000000000000000000000000800725931c8cbfb9765925854c6d5f25be91a859f472a1479f5894dc3b6b1f8cede29c10f42112bb558daafba7a3b2789143e9404420cef0673fc3919cf51bdfc572e99813b8fcfbb361bdb00ee443a257723778617317589860538eb9d13a7b304402"], 0xd8) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f00004c0000/0x4000)=nil, &(0x7f00006a7000/0x1000)=nil, 0x4000, 0x1}) [ 425.935537][ T5827] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 426.305800][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 426.328439][ T5827] usb 3-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 [ 426.371899][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.416801][ T5827] usb 3-1: config 0 descriptor?? [ 426.488804][ T5827] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 426.690330][ T5827] usb 3-1: USB disconnect, device number 31 10:53:27 executing program 3: r0 = memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) fcntl$addseals(r0, 0x409, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}, 0x0, r6}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xe}, 0x3f, r6}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, &(0x7f00000000c0)={@remote, 0x66, r6}) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xb2}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c004) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x1, &(0x7f0000000000)=@raw=[@alu={0x3, 0x1, 0x8, 0xa, 0x5, 0xc, 0x1}], &(0x7f0000000040)='GPL\x00', 0x8, 0xcb, &(0x7f0000000080)=""/203, 0x40f00, 0x10, '\x00', r6, 0x20, r1, 0x8, &(0x7f00000001c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x2, 0x84d22ef5, 0x1}, 0x10, 0xffffffffffffffff, r8, 0x0, &(0x7f0000000300)=[r9]}, 0x80) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000580)) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) 10:53:27 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x57, {0x57, 0x10, "8904f13f883168be16df10419a0d41389ed9b39eb1a5db62d42ce9f8b92225eb937a246f21dabe5302c08727c01790f022566ad69e8a097d48379ec4763bb0cb0e2b47a830bd5d8932d943fcac70e851ddb5977bc0"}}, &(0x7f00000000c0)={0x0, 0x3, 0xe1, @string={0xe1, 0x3, "af53e7db42fe58aa56ca60e18636eba38599286ec8970c000103674cdb65647b136b99f09dd9dcb8d482a9e12a855da522dabf6da6f39a04deaa21dfe179a75189273b9319a846928d37f6747a6941bdb30c2171104bf53ac91e84469b546e7d755922bba27fc25d58570d672c483c4d75354b2c0c929907d7d2b3369e2f36f4a421ef41dbc579c05a9d0863c7b30e20f03543cb0301dc31a3978726ed4af0b399fd053ce378bd6ef34d4ea3f0933a9405eccbb81ae3b34d3e52d263b874b0ec3a5960f4e084105f2a288959aa65620ee804cd03b0e9244702887f1c08ded6"}}, &(0x7f00000001c0)={0x0, 0xf, 0x54, {0x5, 0xf, 0x54, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x3f, 0x9, 0x4, 0x4}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x27, 0x9d, 0x7f}, @ss_container_id={0x14, 0x10, 0x4, 0xfd, "21745d164ef580f1c30a8347b57df063"}, @ssp_cap={0x20, 0x10, 0xa, 0x9a, 0x5, 0xc1be, 0xf0f, 0x20, [0xff, 0xffff30, 0xff000f, 0xc0c0, 0xff00]}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0x8, 0x7, "19c4c38a", "b2018f46"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb6, 0x60, 0x0, 0xff, 0x6, 0x400}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x40, 0xd, 0xd8, "e942fa20319e9400d6b60e793539971bc1961e3234d482dc1411cfdff24d0ff94b8c0bb6fe91b28974b073bbfad0b28ee48dc58761d3989493dcc36ae10ac36f8e6bb4d474aee2878369f4e1e00aa1c038d452fec18e1d0bb2b3041306233cd9fd3f0d343a129a34957c4cbbccee45f8f90c1f5ca30b371af02051872ae403987428c425b38f6c21588815d61270bdd92ea2d0628d18b4383c9411a320678f65d3ca7523e6094cfbdbc600aac23bc2897378aaaa5c8af611203a5daa98c2101a06646b100cddfd524580b357abd34e9e4fcec5ae988621e2"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x32}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x92}, &(0x7f0000000480)={0x20, 0x0, 0x4}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xcf}, &(0x7f0000000580)={0x40, 0xb, 0x2, "40fb"}, &(0x7f00000005c0)={0x40, 0xf, 0x2}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "cd9d"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x42}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x9}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x1b, 0x5e, 0x40, 0x499, 0x102b, 0xc7c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa5, 0x85, 0x8b, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x57, {0x57, 0x10, "8904f13f883168be16df10419a0d41389ed9b39eb1a5db62d42ce9f8b92225eb937a246f21dabe5302c08727c01790f022566ad69e8a097d48379ec4763bb0cb0e2b47a830bd5d8932d943fcac70e851ddb5977bc0"}}, &(0x7f00000000c0)={0x0, 0x3, 0xe1, @string={0xe1, 0x3, "af53e7db42fe58aa56ca60e18636eba38599286ec8970c000103674cdb65647b136b99f09dd9dcb8d482a9e12a855da522dabf6da6f39a04deaa21dfe179a75189273b9319a846928d37f6747a6941bdb30c2171104bf53ac91e84469b546e7d755922bba27fc25d58570d672c483c4d75354b2c0c929907d7d2b3369e2f36f4a421ef41dbc579c05a9d0863c7b30e20f03543cb0301dc31a3978726ed4af0b399fd053ce378bd6ef34d4ea3f0933a9405eccbb81ae3b34d3e52d263b874b0ec3a5960f4e084105f2a288959aa65620ee804cd03b0e9244702887f1c08ded6"}}, &(0x7f00000001c0)={0x0, 0xf, 0x54, {0x5, 0xf, 0x54, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x3f, 0x9, 0x4, 0x4}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x27, 0x9d, 0x7f}, @ss_container_id={0x14, 0x10, 0x4, 0xfd, "21745d164ef580f1c30a8347b57df063"}, @ssp_cap={0x20, 0x10, 0xa, 0x9a, 0x5, 0xc1be, 0xf0f, 0x20, [0xff, 0xffff30, 0xff000f, 0xc0c0, 0xff00]}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0x8, 0x7, "19c4c38a", "b2018f46"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb6, 0x60, 0x0, 0xff, 0x6, 0x400}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x40, 0xd, 0xd8, "e942fa20319e9400d6b60e793539971bc1961e3234d482dc1411cfdff24d0ff94b8c0bb6fe91b28974b073bbfad0b28ee48dc58761d3989493dcc36ae10ac36f8e6bb4d474aee2878369f4e1e00aa1c038d452fec18e1d0bb2b3041306233cd9fd3f0d343a129a34957c4cbbccee45f8f90c1f5ca30b371af02051872ae403987428c425b38f6c21588815d61270bdd92ea2d0628d18b4383c9411a320678f65d3ca7523e6094cfbdbc600aac23bc2897378aaaa5c8af611203a5daa98c2101a06646b100cddfd524580b357abd34e9e4fcec5ae988621e2"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x32}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x92}, &(0x7f0000000480)={0x20, 0x0, 0x4}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xcf}, &(0x7f0000000580)={0x40, 0xb, 0x2, "40fb"}, &(0x7f00000005c0)={0x40, 0xf, 0x2}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "cd9d"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x42}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x9}}) (async) 10:53:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ec], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) (async) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 32) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x9fb4, 0x81, 0x3, 0x81}, 'syz1\x00', 0x52}) (async, rerun: 32) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 427.565491][ T5827] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 427.955760][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 427.975161][ T5827] usb 3-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=c7.c0 10:53:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ec], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x9fb4, 0x81, 0x3, 0x81}, 'syz1\x00', 0x52}) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ec], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) (async) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x9fb4, 0x81, 0x3, 0x81}, 'syz1\x00', 0x52}) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) [ 428.009411][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.058693][ T5827] usb 3-1: config 0 descriptor?? [ 428.118786][ T5827] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 428.316962][T14383] UDC core: couldn't find an available UDC or it's busy: -16 [ 428.331373][T14383] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 428.357734][ T5827] usb 3-1: USB disconnect, device number 32 [ 429.336742][T14365] net_ratelimit: 2044 callbacks suppressed [ 429.336764][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.355383][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.368279][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.381062][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.393855][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.406737][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.419547][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.432252][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.445049][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.457851][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.345372][T14365] net_ratelimit: 2010 callbacks suppressed [ 434.345393][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.364063][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.376871][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.389770][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.402565][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.415741][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.428598][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.441387][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.454137][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.466947][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.356939][T14365] net_ratelimit: 2011 callbacks suppressed [ 439.356962][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.375582][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.388412][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.401190][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.414047][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.426913][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.439711][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.452468][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.465322][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.478177][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.366181][T14365] net_ratelimit: 2010 callbacks suppressed [ 444.366202][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.384771][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.397637][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.410459][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.423196][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.436098][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.448902][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.461747][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.474506][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.487223][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.376414][T14365] net_ratelimit: 2012 callbacks suppressed [ 449.376438][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.395018][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.407901][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.420674][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.433524][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.446374][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.459131][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.471945][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.484736][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.497495][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.385881][T14365] net_ratelimit: 2011 callbacks suppressed [ 454.385904][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.404490][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.417338][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.430195][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.442955][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.455795][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.468488][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.481291][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.494101][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.506907][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.396643][T14365] net_ratelimit: 2014 callbacks suppressed [ 459.396664][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.415318][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.428223][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.441032][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.453846][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.466617][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.479454][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.492295][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.505116][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.517852][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 464.407412][T14365] net_ratelimit: 2011 callbacks suppressed [ 464.407454][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 464.426165][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 464.439047][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 464.451831][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 464.464693][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 464.477558][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 464.490370][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 464.503104][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 464.515957][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 464.528841][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 469.417135][T14365] net_ratelimit: 2013 callbacks suppressed [ 469.417157][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 469.435756][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 469.448594][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 469.461407][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 469.474121][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 469.487011][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 469.499842][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 469.512619][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 469.525519][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 469.538357][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.425452][T14365] net_ratelimit: 2111 callbacks suppressed [ 474.425467][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.442881][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.454458][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.466137][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.477766][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.489341][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.500920][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.512508][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.524095][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.535765][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.435252][T14365] net_ratelimit: 3868 callbacks suppressed [ 479.435274][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.452694][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.464328][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.476023][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.487606][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.499230][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.510804][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.522374][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.533941][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.545638][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 484.446006][T14365] net_ratelimit: 3899 callbacks suppressed [ 484.446021][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 484.463555][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 484.475137][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 484.486712][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 484.498290][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 484.509863][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 484.521441][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 484.533028][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 484.544640][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 484.556287][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 489.456208][T14365] net_ratelimit: 3901 callbacks suppressed [ 489.456223][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 489.473609][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 489.485263][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 489.496853][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 489.508432][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 489.520019][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 489.531584][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 489.543487][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 489.555072][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 489.566642][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 494.466178][T14365] net_ratelimit: 3902 callbacks suppressed [ 494.466192][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 494.483591][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 494.495178][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 494.506795][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 494.518385][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 494.529978][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 494.541557][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 494.553151][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 494.564740][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 494.576356][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.475888][T14365] net_ratelimit: 3903 callbacks suppressed [ 499.475910][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.493435][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.505025][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.516596][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.528167][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.539726][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.551289][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.562863][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.574436][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.586079][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 504.486301][T14365] net_ratelimit: 3900 callbacks suppressed [ 504.486316][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 504.504329][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 504.515984][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 504.527652][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 504.539227][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 504.550841][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 504.562435][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 504.574004][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 504.585656][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 504.597417][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.496414][T14365] net_ratelimit: 3900 callbacks suppressed [ 509.496430][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.513808][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.525463][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.537037][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.548598][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.560164][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.571725][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.583309][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.594874][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.606486][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.505500][T14365] net_ratelimit: 3908 callbacks suppressed [ 514.505516][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.522907][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.534481][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.546098][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.557677][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.569251][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.580838][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.592411][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.604000][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.615615][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 519.515656][T14365] net_ratelimit: 3917 callbacks suppressed [ 519.515672][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 519.533106][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 519.544835][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 519.556467][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 519.568112][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 519.579690][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 519.591282][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 519.602864][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 519.614441][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 519.626054][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.525804][T14365] net_ratelimit: 3911 callbacks suppressed [ 524.525819][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.543227][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.555231][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.566851][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.578449][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.590092][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.601670][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.613247][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.624825][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.636440][T14365] batman_adv: batadv2: Forced to purge local tt entries to fit new maximum fragment MTU (-320)