key$keyring(0x0, 0x0, 0x0, 0x0, r3) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() keyctl$read(0xb, r2, &(0x7f0000000000)=""/107, 0x6b) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:30 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0x5, 0x4) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r3, 0x406, r0) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000080)={0x400, 0x8, 0x5, 0x1, 0x3, 0x5, 0xffff, 0x3f, 0xffffffff, 0x8}) r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) [ 1434.422165] input: syz1 as /devices/virtual/input/input30 13:36:30 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(0x0, 0x0, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:30 executing program 4: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000140)="819bea54a7b936529f1d2576d3347a79e7c436461d779b93000e25a76bdc6ab17865c54322bd04db1e097834621d2a489e1e181d85f334a6eab1ec4b4463969b4bbe0d85261055a6932ed3825c9c7f3a45fccb56c71aef5e789e6ded69b7879cf68f86dff1cd79544f7ad24d50f338d67d313f0f1dfec659ddd0464eed6b076f6d039d525e08e9178ad6150d8ad7c8d8ac14ee08ec5c25845956740fb19f586652d25c8d42bf9b4dcf6cb6c3b210d10a964eabf17cc1165b2b57381d0065460687", 0xc1) epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(r1, &(0x7f00000005c0)="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", 0x1000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:30 executing program 5: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r5 = fcntl$dupfd(r4, 0x406, r1) r6 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) write$P9_RMKNOD(r2, &(0x7f0000000980)={0x14, 0x13, 0x2, {0x18, 0x3, 0x5}}, 0x14) add_key$keyring(0x0, 0x0, 0x0, 0x0, r6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) io_setup(0x9, &(0x7f0000000080)=0x0) ioctl$TIOCLINUX6(r5, 0x541c, &(0x7f0000000380)={0x6, 0x2}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000940)={r4, &(0x7f0000000900)="532061e319fcee"}, 0x10) io_submit(r7, 0x8, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x5, r4, &(0x7f0000000140)="e28291b1fd9d42e432f0dd5100a130b1af598706f2a631719956ab95d479f54f8648551e1d6167f908bab39c3072c9d2bf13df7f7e4467a8128f6bd083bf562e18fe9dab2a52b89eb86a632c0ba7fbf32190f475c10c76c3fbbb4f45119edb", 0x5f, 0x9, 0x0, 0x2, r4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f00000003c0)="6d3258174b1b2049af537ad866f3279d05f862cf9fdd0f882357fd6237130d7d8ebe3d75e4fd8073ca5befaee443f358e7a80e191663250b0328346bc7a992666eb71d51389b5df22c7bbb62e028e94446de39ea5c55d1737725b0710c2d08a0f0688932d94b33951267f0a6a07eafd18070367bc4d841b10800c135d0d03768906bb2b752a1fe1af1903ebb28b0791d861fb4c865d0921f065e706cc7351351fbc286218fe682bd07956bb6bf68d8b00e66067d631bfe6cb261becaf0956fc6b4620b177d212723dbfeedfbfe35bfec32419e71a3f4be9812", 0xd9, 0xc337, 0x0, 0x1, r5}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000004c0)="eaf6f9e50f8eb6b6bbd246610f277fbdd79070765bd915963c56b06135d293d28fb92bf5628ca6a3ee4b00641b2c4303539cc96e123e8242d0ebecf43c0721154dfea3f2ede7d51b94ce697630eb404f9d258a5adaf857722034be8302d23099c2e169868e9178010dbf64f6025503300073bb212c506638831d6d84c10bef714077ba8fc601f8c85444536983147d7d140432f68db131d137adb43b998765440a761fbb11174d46d9430f32d7457dfd", 0xb0, 0x7f, 0x0, 0x3, r4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x401, r4, &(0x7f00000005c0)="94d10f98b4fef4075d986e559a6cdbeda92e4f1ef892de306464d0083eed877f134450031d1a55c4be022f683a608d211d22873f929d9027251c6802e32915134378c247feac555662884851c6a1b95d47f6e8ffe9dbc8c719e94e1a2d2a8564c9b7e0407ed1d86112318532f2d580acdf560bdf427410a7321abdcf7ea1a5f619a02174ae97e9f6f9cd9fbb4338266ca0002465bcc72e166281bfbfb131062ad1d902de", 0xa4, 0xc81, 0x0, 0x1, r3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000000680)="aa8ae8af091867e9c0befef4803f044d1eedf2bca85660fd337dad37d4c383040c9849c02b17043ce538103b86e70ae71ac4f42f31485dfa111ebb2e938efd569e4d909e99e95436b3d76e0820c62a1aaf9331dcbcfcc26f6735e48aaf5246091572360fbc50a37e80f6b1c1e70aea34", 0x70, 0x1acc, 0x0, 0x3, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, r4, &(0x7f0000000700)="94f7d87904c6d4a8a48417189c6130c3847cfb12fd287e18016336629a295141519c8f6409ab2e45d97abb8c55f6d1d6e4697dc88987cbb0a6c4cc0f8f4c24cad8f37119b61e882dc36f886da1c5efd348238a1a4b45fcdb73bb7a45bbd235f3aaaa717c43097626fc7c869a2f58bc376be94b5c338bf36e3e9b9168f78022f4f6d543344e91a814e9f9bc998050ea", 0x8f, 0x1, 0x0, 0x2, r4}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0xf, 0x401, r2, &(0x7f00000007c0)="9a10f7e6a1df654327a5e209aef186992db5ae620890058d5ee29f22893ab783d28ffa47c9fc97bc1dbd0130882e4ed4dc7431d6eb796a", 0x37, 0x9, 0x0, 0x0, r4}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x3, 0x9, r3, &(0x7f0000000840)="490d05c13024985b68a07e4b18483afd416563dfa6238158e9dabceed179c2accd0b8f575aecbe334f9df47e2b3acb0611da4e6d69040cc2f88f3600", 0x3c, 0x7fffffff, 0x0, 0x2, r5}]) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x1) 13:36:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:30 executing program 3: r0 = epoll_create1(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r6, r0) [ 1434.841382] input: syz1 as /devices/virtual/input/input31 13:36:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:30 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) sendto$inet(r3, &(0x7f00000005c0)="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", 0x1000, 0x4040, 0x0, 0x0) fcntl$dupfd(r3, 0x406, r0) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x1, 0x0, 0x5}}, 0x14) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) r7 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r5) add_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="21f5312f3e4142a08cbb118a951e2ba17bfff3c5ae992fba3877dba8236289504e7a25", 0x23, r7) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) finit_module(r2, &(0x7f00000000c0)='TIPC\x00', 0x3) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) [ 1434.997459] input: syz1 as /devices/virtual/input/input32 13:36:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 13:36:31 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) clock_nanosleep(0x3b7cc875a1545b61, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x800000000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) 13:36:31 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:31 executing program 5: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r4, 0x406, r1) r5 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) [ 1435.114125] input: syz1 as /devices/virtual/input/input33 13:36:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) [ 1435.305115] input: syz1 as /devices/virtual/input/input34 13:36:31 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(0x0, 0x0, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:31 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@remote}, &(0x7f0000000140)=0x14) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r3, 0x406, r0) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x4, 0x0, 0x7}}, 0x14) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000180)={0x7, 0x633, 0xfff, 0x1, 0x5}) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 13:36:31 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r3 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:31 executing program 3: r0 = epoll_create1(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r6, r0) [ 1435.687904] input: syz1 as /devices/virtual/input/input35 13:36:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) 13:36:31 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r4 = fcntl$dupfd(r3, 0x406, r0) r5 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r6 = getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000c8030000000000000000000000000000f0000000e0010000f8020000f8020000f8020000f8020000f802000004000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000"], @ANYBLOB="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"], 0x428) fchownat(r4, &(0x7f0000000080)='./file0\x00', r8, r6, 0x1000) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:31 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) [ 1435.970778] input: syz1 as /devices/virtual/input/input36 13:36:31 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x40000000007, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = getpgrp(0xffffffffffffffff) fcntl$setown(r2, 0x8, r5) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0xa, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) setsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f00000005c0)="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", 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r7, 0xffffffffffffffff) 13:36:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) 13:36:31 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r4 = fcntl$dupfd(r3, 0x406, r0) r5 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0x10, 0x7fff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$TIOCNXCL(r4, 0x540d) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 13:36:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) [ 1436.096241] input: syz1 as /devices/virtual/input/input37 [ 1436.169448] input: syz1 as /devices/virtual/input/input38 13:36:32 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(0x0, 0x0, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:32 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="d648c50c35ca21eebc8adec968248c44", 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) delete_module(&(0x7f00000000c0)='system^}cgroup\x00', 0xa00) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r3 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) accept$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) recvfrom$packet(r2, &(0x7f0000000180)=""/149, 0x95, 0x10042, &(0x7f0000000300)={0x11, 0xf8, r5, 0x1, 0x80000001, 0x6, @dev={[], 0x1f}}, 0x14) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080)=0x1, 0x4) ioctl$TIOCNXCL(r0, 0x540d) fsetxattr$security_ima(r2, &(0x7f0000000000)='security.ima\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="00ea6c00cd4e6843d7db81613f78af6902a640e44adfc4dfcc1d6adccf2a461e6de9e5e832bb330299f1f5665c21e2f5a22a50b540d24f3ca81f27b3335ac4db3cd3547e35fdc60c4e2b146c2636fa7e6806b8b0437a0479da21e76041c591f84989b48bd70198757016a9de42"], 0x4, 0x2) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) connect$netlink(r1, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0xa0000000}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:32 executing program 5: prctl$PR_SET_THP_DISABLE(0x29, 0x1) epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r3, 0x406, r0) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) recvmmsg(r0, &(0x7f0000004080)=[{{&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)=""/58, 0x3a}, {&(0x7f0000000180)=""/162, 0xa2}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000480)=""/217, 0xd9}, {&(0x7f00000005c0)=""/84, 0x54}], 0x6}, 0xffff}, {{&(0x7f00000006c0)=@ax25={{0x3, @bcast}, [@default, @remote, @remote, @bcast, @default, @bcast, @rose, @default]}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000740)=""/81, 0x51}, {&(0x7f00000007c0)=""/202, 0xca}], 0x2}, 0xffff}, {{&(0x7f00000008c0)=@nfc, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/234, 0xea}], 0x2, &(0x7f0000000b00)=""/36, 0x24}, 0x2062e1e3}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b40)=""/111, 0x6f}, {&(0x7f0000000bc0)=""/140, 0x8c}, {&(0x7f0000000c80)=""/241, 0xf1}], 0x3}, 0x9}, {{&(0x7f0000000dc0)=@rc, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/213, 0xd5}, {&(0x7f0000000f40)=""/246, 0xf6}, {&(0x7f0000001040)=""/249, 0xf9}, {&(0x7f0000001140)=""/62, 0x3e}], 0x4, &(0x7f00000011c0)=""/218, 0xda}, 0x1}, {{&(0x7f00000012c0)=@nfc, 0x80, &(0x7f0000001640)=[{&(0x7f0000001340)=""/202, 0xca}, {&(0x7f0000001440)=""/53, 0x35}, {&(0x7f0000001480)=""/212, 0xd4}, {&(0x7f0000001580)=""/165, 0xa5}], 0x4, &(0x7f0000001680)=""/222, 0xde}, 0xff}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001800)=""/17, 0x11}, {&(0x7f0000001840)=""/144, 0x90}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/131, 0x83}], 0x4}, 0x6}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002a00)=""/226, 0xe2}, {&(0x7f0000002b00)=""/248, 0xf8}], 0x2}, 0x10000}, {{&(0x7f0000002c40)=@generic, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002cc0)=""/155, 0x9b}, {&(0x7f0000002d80)=""/103, 0x67}, {&(0x7f0000002e00)=""/73, 0x49}, {&(0x7f0000002e80)=""/166, 0xa6}], 0x4, &(0x7f0000002f80)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000003f80)=""/109, 0x6d}], 0x1, &(0x7f0000004040)=""/31, 0x1f}, 0x6}], 0xa, 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:32 executing program 3: r0 = epoll_create1(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r6, r0) [ 1436.554918] input: syz1 as /devices/virtual/input/input39 13:36:32 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r4 = fcntl$dupfd(r3, 0x406, r0) r5 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000080)={0x2, 0x0, [0x0, 0x0]}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:32 executing program 5: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000009) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7fff}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r5 = fcntl$dupfd(r4, 0x406, r1) r6 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r6) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r7 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001000000000000000300000000000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="00000000faffffffffffffff00000000edc8cc22407dae0000000000", @ANYRES32=r1, @ANYBLOB="000000007e0300000000000000000000000000000000000000"]) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='/dev/loop-control\x00', r7) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) write$P9_RWRITE(r5, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x9}, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) [ 1436.805299] input: syz1 as /devices/virtual/input/input40 13:36:32 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x1009, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r3 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000001c0)) unshare(0x20600) setsockopt$inet_tcp_int(r2, 0x6, 0xd, &(0x7f0000000000)=0x7ff, 0x4) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) getsockname$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e) accept$inet(r2, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000005c0)=""/147) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:32 executing program 5: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, r5) r6 = fcntl$dupfd(r4, 0x406, r1) r7 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) r8 = getpgrp(0xffffffffffffffff) fcntl$setown(r6, 0x8, r8) add_key$keyring(0x0, 0x0, 0x0, 0x0, r7) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, 0x0) ioctl$TIOCNXCL(r3, 0x540d) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x97, 0xfffffffffffffff9, 0x0, 0x20, 0x0, 0x10000, 0x40, 0x5, 0x1, 0x5, 0x401, 0xc6f, 0x8, 0xa4, 0x7ff, 0x3cd, 0x8, 0x6, 0x1, 0x6, 0x4, 0x8000, 0x9, 0x60a, 0xf02, 0x4, 0x9, 0x9, 0x2, 0x40, 0x20, 0x0, 0x80000000, 0x401, 0x400, 0x4, 0x0, 0x8, 0x3, @perf_config_ext={0xc98, 0xc97}, 0x82, 0x6, 0x1, 0x3, 0x3, 0xeb6, 0x633d}, r11, 0x4, r9, 0x9) ioctl$LOOP_CTL_ADD(r10, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x1) 13:36:32 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:zero_device_t:s0\x00', 0x23) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) 13:36:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1437.067365] input: syz1 as /devices/virtual/input/input41 13:36:33 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:33 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r4, 0x406, r1) r5 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x802000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r0, 0x301, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x9}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:36:33 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) epoll_create1(0x80000) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) syncfs(r0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) chdir(&(0x7f0000000080)='./file0\x00') r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=""/23, &(0x7f0000000040)=0x17) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="10000000170100c324e322a63207002e2f66696c65c5"], 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) [ 1437.420677] input: syz1 as /devices/virtual/input/input42 13:36:33 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r5, 0xffffffffffffffff) 13:36:33 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c40)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20010020}, 0xc, &(0x7f0000000400)={&(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x801}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@dev={0xfe, 0x80, [], 0xc}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x8000, 0x4e24, 0x1b7, 0xa, 0x0, 0x20, 0x77}, {0xffffffff, 0x1000, 0x3, 0x10001, 0xffffffffffffffcf, 0x0, 0x4, 0x100000001}, {0x0, 0x1, 0x5, 0x2c7b}, 0x7, 0x6e6bb5, 0x2, 0x1}, {{@in6=@empty, 0x4d2, 0x3c}, 0xa, @in=@rand_addr=0x1, 0x3503, 0x3, 0x1, 0x2, 0x21a, 0x5f3, 0x899d}}, 0xe8) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getuid() sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000600)="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", 0x519}], 0x1, 0x0, 0x0, 0x800}, 0x44804) read(r2, &(0x7f0000000200)=""/225, 0xe1) shutdown(r2, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil) unlink(&(0x7f00000000c0)='./file0\x00') syz_open_procfs(0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) 13:36:33 executing program 4: epoll_create1(0x880080000) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r2, 0x40406, r0) r3 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:33 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x4a8, 0x280, 0x280, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8, 0xfffffffffffffba0, 0x0, 0x2}}}, {{@arp={@local, @empty, 0xff000000, 0xff000000, @mac=@broadcast, {[0x0, 0xbc8ffa0c6e4bdd44, 0xff, 0x0, 0xff]}, @empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x100000001, 0x8000, 0x8, 0x5, 0x709, 0x7, 'team_slave_1\x00', 'lapb0\x00', {}, {0xff}, 0x0, 0x8}, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x8000, 0x4, 0x0, 0x0, "69113356760c830ecee31260f36b9dd7710a2a99d208b621c408da1aae03ca369349cd262ced2d6197c6ad60df5490cb3e7de683d9d6c820b3891663bf375986"}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r5 = fcntl$dupfd(r4, 0x406, r1) r6 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x80, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) write$P9_RLERROR(r5, &(0x7f0000000080)={0x1b, 0x7, 0x1, {0x12, '/dev/loop-control\x00'}}, 0x1b) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:33 executing program 5: r0 = epoll_create1(0x7fffe) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x8}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x4, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r3, 0x406, r1) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xfffffffffffffffd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20010020}, 0x2, &(0x7f0000000400)={&(0x7f0000001200)=ANY=[@ANYBLOB="000000e303000000000000008f37ca746e6975e405ca233b13e16ae96c6b98eab0de6897dbab9a32cd69bc853f2b182b8b7893158cb2c2cfbae632e43bcf593b8dcab9af202f746771eed45bcfa7268022fc0146b6d976706f1ef804b02cf18e48fb7cd99c8e8573772faf265a9d6f03bff740dea54f11e40e207a4bbd571af23aa019e54c1c24f260cad88289144d135eb51b448ea1a5db7a9c4d3789530bdbc43237ffd4e1456fab94b5d34ce6b6159cbced900a2800a4c922d16f4854d8b5fa3cdc1531a5fbdfbcc02267318d78c3a249f7c909c42ee5cb39e6f55d8054970ced81f7d8cde74524fddcd6e88453701f9781ec3ee8a2e8c2f9a547871d362926dcec4553af7d1b8248a575891afb472e790693be2b572881d149fcc6f7603f650708c6c49e578622df7186d32c5a8942a55bd617bdeac88f998d7df82f6ec65aa7388115e73a99355c4851ef3b9bb19581af105349219ebc9da8a22f736b021ad44e37badf5f76cbe445fe6a8a98dc2a6789208b6242879c2bcaa273f7f1e83ed7d43759f1c1e5d9a3076cb0fa03acc634ff7b9fe0d8a3addc551eec4e4c4b7e2aa1275a63927bc09d584ee0bce0aaf4ac4c0fac1b2116ef337d3d2b4ae5a8d1154144786338dcb5cd3fd954c0da6334ed76b4a3b74b9fe806ef4920517fd47435f4e7997f005bbb4ef0c97b4daff88d31464984cf93991097baf0bd9ac97ff80dbe16bee86f09e5bea33014d9fd1de4cf9194dc4933f6a620c9c0c9a1eed73eedd18fd84ee5b904f2f401cd752f86a5a2776690a51940cd582887a337afca4edab58293790e52a06270d1672eeee02e7312db01695f4abc364df9f41c51f7d8ad8ca442bad49e23150a4eea509305fcc833bd4aa81f702e5193dec9613d3b104dbcb4078b6c4f89efe59a5770fa72c9e7d5835a0fdf51036a8f7ae8761c2500e1bab95884e07c8c31ddfaf8debc57633ec3995b83606cd34a859b2c9adce21705d1220b43517ef4b9973af7c7a716f226b53756283261c72e3a906846ae797321edb0510ab32bcc6a552823d4b531f1a304546fb42c8083d05fa7a113839425369c161d16d000596edf3f5b2a0e03c4549dcc74ec029864423019f5e2268739eeb96ec28246e9f0f665a01bf240a227f395a52738899e174748e48f918b19ae4206fceeb00506f9d4990489c54b593636e86e4d9b44092ecdaa3905f7ff971ba6fd374d7d9b36bd7bbf6909159733080528702c373f5f22cdfd7188c60e4e9817c7771352bb2cae9195d46194779b68207205aa9ff12d4a18b690409940d4b98a3c8b176d9c1a9ac4f6174bd95c2b7cad6f731c1ec9c15a48657604cb9400000000e4bbde3738a1874864905d2485d0e717064228e9e0015a95608e8c3a91dd391bebdc7cef5c52afb7fe8d082d8ba164c9138608f7f3ffa16d7099771c79c445def8"], 0x1}, 0x1, 0x0, 0x0, 0x801}, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@dev={0xfe, 0x80, [], 0xc}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x8000, 0x4e24, 0x1b7, 0xa, 0x0, 0x20, 0x77, r6, r7}, {0xffffffff, 0x1000, 0x3, 0x10001, 0xffffffffffffffcf, 0x9, 0x4, 0x100000001}, {0x0, 0x1, 0x5, 0x2c7b}, 0x7, 0x6e6bb5, 0x2, 0x1}, {{@in6=@empty, 0x4d2, 0x3c}, 0xa, @in=@rand_addr=0x1, 0x3503, 0x3, 0x1, 0x2, 0x21a, 0x5f3, 0x899d}}, 0xe8) setsockopt$inet_tcp_int(r8, 0x6, 0x0, &(0x7f0000000140)=0x2000ed9d, 0xffffff86) bind$inet(r8, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) 13:36:33 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000700)) geteuid() prctl$PR_SET_FPEMU(0xa, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000001c0)) lstat(0x0, &(0x7f0000000a40)) stat(0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffe03}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r3, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 13:36:33 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000180)='en\x00\x00\x00\x00\x00\x00\x80\x7f', 0x0, &(0x7f0000000140)="fcdc28fc7e74a38c522147", 0x492, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x9d, r3) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) fcntl$dupfd(r0, 0x406, r1) ioctl$TIOCNXCL(r1, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:33 executing program 5: r0 = epoll_create1(0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=r1, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x20000, 0x0) write$P9_RRENAMEAT(r3, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r4 = syz_open_procfs(0x0, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r5, 0x406, r2) r6 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r8) ioctl$TIOCNXCL(r4, 0x540d) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:34 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:34 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) getgroups(0x5, &(0x7f0000000180)=[0x0, 0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) setgroups(0x1, &(0x7f00000001c0)=[r4]) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r3, 0x406, r0) r5 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r5) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x0, 0x3, 0x7}}, 0x14) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) getsockname$inet(r3, &(0x7f0000000200)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10) 13:36:34 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) 13:36:34 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r0, 0x406, r1) r3 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='./file0\x00') add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) add_key(0x0, 0x0, 0x0, 0x0, r3) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x10030000) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) prctl$PR_GET_SECCOMP(0x15) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fc) accept(r5, 0x0, &(0x7f0000000140)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd) 13:36:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:36:34 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r5, 0xffffffffffffffff) [ 1438.468214] input: syz1 as /devices/virtual/input/input43 13:36:34 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r3, 0x406, r0) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:34 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r2, 0x310, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x7ff}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x800) r3 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:34 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') readlink(&(0x7f00000002c0)='./file0\x00', &(0x7f00000005c0)=""/4096, 0x1000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r1, 0x0, 0xe, &(0x7f0000000200)='(vboxnet1:em0\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000180)={0xc1c323e7f6f663e3, 0x70, 0x1, 0x2, 0xfffffffffffffffe, 0x1000, 0x0, 0x4, 0x10001, 0x8, 0x1, 0x9c, 0x3, 0x7, 0x7, 0x1000, 0xb3, 0x3, 0x8, 0x6, 0x7fff, 0x800, 0x0, 0x7fff, 0x4, 0x4, 0xffff, 0x2, 0x200, 0x5, 0x0, 0x5, 0x5, 0x0, 0xffffffff, 0x7fffffff, 0x2, 0x3, 0x0, 0x0, 0x3, @perf_config_ext={0x8001, 0xf68c}, 0x2, 0x7, 0x8, 0x7, 0x10b6, 0x7ff}, r4, 0x3, r2, 0x8) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r3, 0x406, r0) r5 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) setxattr$security_smack_transmute(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$RTC_UIE_OFF(r3, 0x7004) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:34 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r3, 0x406, r0) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x205fd) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:34 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='wlan1posix_acl_accessselinux^-\x00', r1}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:34 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r4 = fcntl$dupfd(r3, 0x406, r0) r5 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x100000001) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socket$nl_generic(0x10, 0x3, 0x10) splice(r7, &(0x7f0000000080), r6, &(0x7f00000000c0), 0x10000, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:35 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:35 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r3, 0x406, r0) r5 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) keyctl$search(0xa, r6, &(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x1}, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:35 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x1370}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) dup2(r7, 0xffffffffffffffff) 13:36:35 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:36:35 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r5, 0xffffffffffffffff) 13:36:35 executing program 5: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r4, 0x406, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:35 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r3, 0x406, r0) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) fchdir(r5) [ 1439.484164] input: syz1 as /devices/virtual/input/input44 13:36:35 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = request_key(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, r3) r5 = fcntl$dupfd(r2, 0x0, r0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f00000002c0)="c7fc9a9ddb9518b92071d05133939810da51581b1069cf38c8c9dbf9a82de7898b961fd6d15d88d887da167fab5b7767fb5e00f747b3d1b6514afbd2dc06cf496f4602649f420ca497a89ba8185e5457e679d70e2274364f593e51a0cfaf35634b8a6e97252e147982fd13433cd4bd6c8d996686bb60cd84c230801c24e2a93802fce88a8b301e0127260d893f6c2f5b339f41de", 0x94, r4) openat$cgroup_ro(r5, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$TUNSETLINK(r5, 0x400454cd, 0x305) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f0000000380)=""/44, &(0x7f00000003c0)=0x2c) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="01040300aab065d3009e657195b8043b211e0001000000000000f94eb888fc18246a6c5ce75818ad800000007da19d4c6e6d90430826c055cfcff95e7a1c46186a36605610811eb87e60bde8b5a40df702929c4cbb2049738d965e9e06c2e3e95ec230e1e18092585595ebab672e261838bc8f8bbf7098fe6da907a725f7f81d7e7345989d97978a6f9a56803ec0"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:35 executing program 5: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') fadvise64(r0, 0x44, 0x3, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r4, 0x406, r1) r5 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getegid() ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r8, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x80) ioctl$VT_WAITACTIVE(r6, 0x5607) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) ioctl$KIOCSOUND(r4, 0x4b2f, 0x14001) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:35 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r3, 0x406, r0) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000080)=0x1ff, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:35 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:36 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:36 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r3, 0x406, r0) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000000c0)=0x0) wait4(r6, 0x0, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x101000) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000140)=""/130) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:36 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) poll(&(0x7f0000000040)=[{r4, 0x4010}, {r2, 0x40}, {r0, 0x2200}], 0x3, 0x3) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) eventfd2(0x5, 0x800) dup2(r5, 0xffffffffffffffff) 13:36:36 executing program 4: epoll_create1(0x80000) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = request_key(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0xe2, 0xe0, 0x1, 0x2, 0xc, 0x6, 0x1, 0x907, 0x4, 0x5, 0x5, 0x40}) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:36 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r4 = fcntl$dupfd(r3, 0x406, r0) r5 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r7) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) exit(0xfffffffffffffffb) 13:36:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:36 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:36 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r5, 0xffffffffffffffff) 13:36:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:36 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r4 = getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) ioctl$KDDISABIO(r1, 0x4b37) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r3, r1) setregid(r4, r4) 13:36:36 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() r3 = fcntl$getown(r1, 0x9) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) sched_setattr(r3, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x1, 0x561b, 0x0, 0x9, 0xfffffffffffff44a}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:36 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:37 executing program 5: epoll_create1(0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000003c0)) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r4, 0x406, r1) r5 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x205fe) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000080)) getsockopt$sock_int(r2, 0x1, 0x3f, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:37 executing program 0: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:37 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r3 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x205fd) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) fstatfs(r2, &(0x7f0000000000)=""/80) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:37 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:37 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:37 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) 13:36:37 executing program 0: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:37 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000520018002cbd7000fddbdf251c08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000600000000000800060000000080000000"], 0x34}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r3, 0x406, r0) r6 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:37 executing program 0: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:37 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r4 = fcntl$dupfd(r3, 0x406, r0) r5 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000080)={0x2, 0x9, 0x0, 0x0, 0xd}) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:37 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(r0, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getpeername$packet(0xffffffffffffffff, &(0x7f0000003780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000037c0)=0x14) bind$packet(r1, &(0x7f0000003800)={0x11, 0xd, r2, 0x1, 0xffffffff}, 0x14) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r5 = fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) r6 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) ioctl$VT_GETMODE(r5, 0x5601, &(0x7f0000000080)) add_key$keyring(0x0, 0x0, 0x0, 0x0, r6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:37 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r3, 0x406, r0) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000080)) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) prctl$PR_SET_DUMPABLE(0x4, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:38 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:38 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000001d00000000000000000000000000001f0000000600000080050000d8030000f0010000f0020000f0010000f001e87ad53ac5862c040000e8040000e8040600e804000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80010010000000000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000002000000000000002800727066696c746572000000000000000000000000000000000000000000000000000000000000280054544c00000000000000000000000000000000000000000000000000000002000000000000007f000001ffffffff00000000ffffffff76657468305f746f5f627269646765006c6f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000012e0000000000000000000000000000b800e0000000000000000000000000000000000000000000000000002000736f636b657400000000000000000000000000000000000000000000000028004453435000000000000000000000000000000000000000000000000000001100000000000000ac1414aae0000002ffffffffffffffff726f736530000000000000000000000076657468305f746f5f7465616d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000730001010000000000000000000000000000d80000010000000000000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000700c00000600000005000000560e0000030000000100000000000080080100002800434c41535349465900000000000000000000000000000000000000000000ff0f000000000000ac1414bbac1414aaff0000ffffffffff69726c616e300000000000000000000076657468315f746f5f7465616d000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f0001100000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000400000000000000280054544c000000000000000000000000000000000000000000000000000000020100000000000000000f1fe0000001000000ffffffffff6873723000000000000000000000000069666230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000005c00024a0000000000000000000000000000e80010010000000000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000008000000000000002800727066696c7465720000000000000000000000000000000000000000000005000000000000002800434845434b53554d000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x5e0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) write$P9_RLINK(r3, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(r4, &(0x7f0000000140)=@abs, 0x6e) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r7, 0xffffffffffffffff) 13:36:38 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) vmsplice(r2, &(0x7f0000000340)=[{&(0x7f0000000140)="5fdebfd1d82408d718dd3016a787c5e0099d3a562afafb03cce25b0cd6f4ca5a936415311533a6cae1b7556056417b0abe4ff00e2131662c83942358735afbcb97fdd8b6ac3c0224fc9049c3d95f0af8ad0494790b2a7d942bfdebb726ee58d4a6864be58eb1f3335692e3508bb769e0ff06523a222d809fd2de838465aa2afecbd616012ba555edaa06c6066b2bd96da8e22a0ec940419aa22e390bdd60509aa91fe03e2f870983b16f7bca0df88e47b8fab57617b49404c282ee07b6fba7a771f7838c0c6c703b8cb3ebc997946f495ecd9a99a662b3a8d26f45256c77104cc7b6d8392e14fe64cce012fc466a", 0xee}, {&(0x7f00000003c0)="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", 0xfd}, {&(0x7f0000000080)="44776ee6d48b920184917124f8fea21aec3691ca988e4ec0891e4a941166166d38c54b045cad7555651187c1e3e31498eef18d1810dd24865a602ae2c323860425641d1e3b043eb5a9c52972b835b37bf9703dd96b91486c857702a7325acba117dcfe2b2800cdb1", 0x68}, {&(0x7f0000000280)="e5324926a7a0976972b591bdf05eb7e69327d7d5bb8ac056d7a935d64a12a801244303f0ac47bcb01391cda2dcfd71b06904ca50778f6f4cb4d7c7913189dab5faec3e568d6b47d04bf84b88d09af3f5cd0b", 0x52}], 0x4, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r3, 0x406, r0) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:38 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:38 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) sched_setattr(r3, &(0x7f0000000040)={0x30, 0x0, 0x1, 0x9, 0x7, 0x3, 0x3}, 0x0) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:38 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) fcntl$dupfd(r3, 0x406, r0) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:38 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) sendfile(r1, r2, &(0x7f0000000040), 0x9) r3 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:38 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:39 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_cancel(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x7, r1, &(0x7f0000000280)="d7c4ba50b1b813be8f7871dc392ac3533a6dad853dec180436297c79a2a7d8b59b033ed0a40ff7d185fd4fa20d101973428dda6e7d52aeb10bcb92022c9966d9c8d34f80358ee97b6960d3", 0x4b, 0xffffffff80000001, 0x0, 0x1, r2}, &(0x7f00000000c0)) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r7, 0xffffffffffffffff) 13:36:39 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000180)={0xf5, 0x60d, 0x3ff}, 0xc) r2 = syz_open_procfs(0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f00000000c0)=0x928a, 0x4) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r3, 0x406, r0) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) ioctl$RTC_AIE_ON(r1, 0x7001) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000080)={0x37, 0x2, 0x4, 0x9, 0x7, 0x800, 0x3, 0x73, 0x1}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000140)={r3, 0x0, 0x7ff, 0xffff, 0x6}) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:39 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:39 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:39 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) ioctl$KDSKBLED(r1, 0x4b65, 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:39 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r4 = fcntl$dupfd(r3, 0x406, r0) r5 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f00000001c0)="10c1b51f1d1eb9f48af10b792a0fa554ec99290e93f97fa3c1e5b451241c1317b8b0391fbb3af06ff5192eaa55607f12e751798639a87572fbb38b97945ce602f75188cc04cf3473f2ae26d60dd3c1b5ac41d229d74af1904e70018a49d64902c38569666550f09975") unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:40 executing program 2: epoll_create1(0x20) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4000, 0x0) dup2(r5, 0xffffffffffffffff) 13:36:40 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0xffffffc6, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r3, 0x406, r0) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:40 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:40 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180), &(0x7f00000001c0)=0x4) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={0x80}, &(0x7f0000000040), &(0x7f0000000140)={r1, r2+10000000}, 0x8) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RRENAMEAT(r3, 0x0, 0xfffffffffffffd38) r4 = getpgrp(0xffffffffffffffff) r5 = syz_open_procfs(r4, 0x0) r6 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r7 = fcntl$dupfd(r6, 0x406, 0xffffffffffffffff) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r7, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) unshare(0x20600) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x82, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) ioctl$TIOCNXCL(r5, 0x540d) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) fcntl$getownex(r6, 0x10, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000380)=0x100000001, 0x297) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) recvfrom$inet6(r0, 0x0, 0x0, 0x40000001, 0x0, 0x0) 13:36:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1444.183093] input: syz1 as /devices/virtual/input/input63 13:36:40 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x200000, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0xfffffffffffffffc) mount(&(0x7f0000000080)=@md0='/dev/md0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='rootfs\x00', 0x8, &(0x7f0000000180)='wlan1-\'\x9c\x00') fcntl$dupfd(r3, 0x406, r0) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r6 = getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r8, r6) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) [ 1444.331248] input: syz1 as /devices/virtual/input/input64 13:36:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:40 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) getgroups(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x5, 0x0, "6a37ae8706eb0c05be10c6235d271e3345fbf4494814fe9f2b5c5adb268eabc0182f2beb7c4201ba65b4cffd16c158a1d9970b0fedefd23c8783a70eedcee68c640f567c05fa837093fb97883f42a44d"}, 0xd8) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) 13:36:40 executing program 5: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:40 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r0, 0x406, r1) r3 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='./file0\x00') add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) add_key(0x0, 0x0, 0x0, 0x0, r3) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x10030000) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) prctl$PR_GET_SECCOMP(0x15) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fc) accept(r5, 0x0, &(0x7f0000000140)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd) [ 1444.455817] input: syz1 as /devices/virtual/input/input65 13:36:40 executing program 2: epoll_create1(0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000040)='attr/sockcreate\x00') socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x128) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) 13:36:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:40 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r0, 0x406, r1) r3 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='./file0\x00') add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) add_key(0x0, 0x0, 0x0, 0x0, r3) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x10030000) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) prctl$PR_GET_SECCOMP(0x15) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fc) accept(r5, 0x0, &(0x7f0000000140)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd) 13:36:40 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 1445.044900] input: syz1 as /devices/virtual/input/input66 13:36:41 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x3d) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:41 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(0x0, 0x0, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1445.217450] input: syz1 as /devices/virtual/input/input67 13:36:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:41 executing program 5: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:41 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) [ 1445.310644] input: syz1 as /devices/virtual/input/input68 [ 1445.355535] input: syz1 as /devices/virtual/input/input69 13:36:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1445.547676] input: syz1 as /devices/virtual/input/input70 13:36:41 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x2}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000400) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r7 = dup2(r6, 0xffffffffffffffff) fgetxattr(r1, &(0x7f0000000040)=@known='trusted.overlay.origin\x00', &(0x7f0000000340)=""/254, 0xfe) ioctl$SNDRV_TIMER_IOCTL_STATUS(r7, 0x80605414, &(0x7f0000000440)=""/249) 13:36:41 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r3, r4) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:41 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 1445.928782] input: syz1 as /devices/virtual/input/input71 13:36:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {0x0}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:42 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(0x0, 0x0, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 1446.092549] input: syz1 as /devices/virtual/input/input72 13:36:42 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {0x0}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:42 executing program 5: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 1446.235517] input: syz1 as /devices/virtual/input/input73 13:36:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {0x0}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:42 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) [ 1446.373894] input: syz1 as /devices/virtual/input/input74 13:36:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1446.491790] input: syz1 as /devices/virtual/input/input75 13:36:42 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) r4 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)='em0\x00', 0xfffffffffffffffa) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) 13:36:42 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:42 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:42 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(0x0, 0x0, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 1447.004557] input: syz1 as /devices/virtual/input/input76 13:36:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:43 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) 13:36:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1447.314531] input: syz1 as /devices/virtual/input/input77 13:36:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {0x0}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:43 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x2}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000400) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r7 = dup2(r6, 0xffffffffffffffff) fgetxattr(r1, &(0x7f0000000040)=@known='trusted.overlay.origin\x00', &(0x7f0000000340)=""/254, 0xfe) ioctl$SNDRV_TIMER_IOCTL_STATUS(r7, 0x80605414, &(0x7f0000000440)=""/249) [ 1447.457112] input: syz1 as /devices/virtual/input/input78 13:36:43 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) dup3(r2, r3, 0x80000) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) 13:36:43 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) 13:36:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {0x0}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:43 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:43 executing program 1: epoll_create1(0x0) socketpair$unix(0x1, 0x40000000007, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = getpgrp(0xffffffffffffffff) fcntl$setown(r2, 0x8, r5) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0xa, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) setsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f00000005c0)="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", 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r7, 0xffffffffffffffff) [ 1447.934450] input: syz1 as /devices/virtual/input/input79 13:36:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {0x0}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:44 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) [ 1448.078326] input: syz1 as /devices/virtual/input/input80 13:36:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:44 executing program 5: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) [ 1448.287740] input: syz1 as /devices/virtual/input/input81 13:36:44 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 13:36:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:44 executing program 5: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) [ 1448.413830] input: syz1 as /devices/virtual/input/input82 13:36:44 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0xc) r2 = syz_open_procfs(r1, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0xffffffffffffff66) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x3) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) r4 = getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setregid(r4, r4) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x42c02, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r8, 0xffffffffffffffff) 13:36:44 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) 13:36:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:44 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:44 executing program 5: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) 13:36:44 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) [ 1448.800681] input: syz1 as /devices/virtual/input/input83 13:36:44 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) 13:36:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:44 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) 13:36:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1449.011453] input: syz1 as /devices/virtual/input/input84 13:36:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:45 executing program 2: r0 = epoll_create1(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4000, 0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() prctl$PR_SET_PDEATHSIG(0x1, 0x29) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) write$P9_RLOPEN(r3, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x10, 0x2, 0x3}, 0x2}}, 0x18) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f00000000c0)=0x8000, 0x4) connect$unix(r3, &(0x7f0000000280)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) readahead(r0, 0x5481, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) 13:36:45 executing program 5: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1449.656282] input: syz1 as /devices/virtual/input/input85 13:36:45 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:45 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:36:45 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) 13:36:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:45 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) 13:36:45 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(r2, 0x540d) 13:36:45 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() 13:36:45 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) [ 1449.890937] input: syz1 as /devices/virtual/input/input86 13:36:45 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) 13:36:46 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0xffffffffffffff83, 0xfffffffffffffff9) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x64, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x53ef}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @multicast1}}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x2, 0x8001, 0x1a00, 0x42]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3e25}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f000000d000)={0xa, 0xe20}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20020000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x20c, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffffc}]}, @TIPC_NLA_BEARER={0x70, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffff000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe93}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x70ca11e8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff60d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x552}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000}, 0xf06b80d8468b30e2) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) 13:36:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:46 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 13:36:46 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:46 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) 13:36:46 executing program 5: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 1450.534852] input: syz1 as /devices/virtual/input/input87 13:36:46 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) 13:36:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:46 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) 13:36:46 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) [ 1450.728879] input: syz1 as /devices/virtual/input/input88 13:36:46 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) 13:36:46 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) 13:36:47 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) 13:36:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:47 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) [ 1451.444509] input: syz1 as /devices/virtual/input/input89 13:36:47 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:47 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) 13:36:47 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:36:47 executing program 5: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {0x0}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:47 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) 13:36:47 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) syz_open_procfs(0x0, 0x0) [ 1451.605480] input: syz1 as /devices/virtual/input/input90 13:36:47 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:36:47 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:48 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x1) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) ioctl$VT_DISALLOCATE(r3, 0x5608) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) 13:36:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {0x0}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:48 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x10) [ 1452.293633] input: syz1 as /devices/virtual/input/input91 13:36:48 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:48 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) 13:36:48 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x10) 13:36:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {0x0}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:48 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {0x0}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:48 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x10) 13:36:48 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {0x0}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:48 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() 13:36:48 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) [ 1452.488315] input: syz1 as /devices/virtual/input/input92 13:36:49 executing program 4: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:49 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {0x0}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1453.219271] input: syz1 as /devices/virtual/input/input93 13:36:49 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:49 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x4, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000000140)="d334e0aae01476cd3d4ebe18765121f9a86c01bae0987213a2731f8fe527b59bb8e4d249fe8b916351c56a62f426b8c3aaea66ea8ca3668f83c8a798a134230de80df5a5de20916882e36ca18ad9777e21fd1c87b58e947f46c94ab148d4c53992", 0x61, 0xfffffffffffffffe) r4 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) signalfd(r1, &(0x7f00000000c0)={0x800}, 0x8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r4) connect$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r7, 0xffffffffffffffff) 13:36:49 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) 13:36:49 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {0x0}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:49 executing program 4: epoll_create1(0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:49 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:49 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) 13:36:49 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {0x0}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:49 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) [ 1453.369908] input: syz1 as /devices/virtual/input/input94 13:36:49 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, 0x0, 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1453.524489] input: syz1 as /devices/virtual/input/input95 13:36:50 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:50 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') getcwd(&(0x7f0000000340)=""/242, 0xf2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(r0, 0x0, 0xfffffffffffffdb1) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) 13:36:50 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {0x0}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:50 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, 0x0, 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:50 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) 13:36:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {0x0}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:50 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0xffffffffffffff83, 0xfffffffffffffff9) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x64, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x53ef}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @multicast1}}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x2, 0x8001, 0x1a00, 0x42]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3e25}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f000000d000)={0xa, 0xe20}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20020000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x20c, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffffc}]}, @TIPC_NLA_BEARER={0x70, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffff000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe93}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x70ca11e8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff60d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x552}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000}, 0xf06b80d8468b30e2) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) 13:36:50 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, 0x0, 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:50 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x13f) [ 1454.233743] input: syz1 as /devices/virtual/input/input96 13:36:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {0x0}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:50 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) write$9p(r2, &(0x7f0000000280)="dd3fa9e3879ad1c63f28926f847d03b11cb1632bd0ebd6b64c9f24326c1f1de541474f07e819692860d4487641c0e543458847eafdeed736c2a4deafa3b25a8f760311a0cc1ebbd779508eaeda1212a980135e181ef426a0e47e7f26545397357460fd34bb94ff8dbc117dbf119f93205f68774eb272c0f66a51ba5554d79881733396e01ca43a46586e5ffdc498379ff394b064e5b120a267b5fc237ec88d9afeafad385ea67313e2ac", 0xaa) 13:36:50 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) [ 1454.383986] input: syz1 as /devices/virtual/input/input97 13:36:50 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:51 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) write$P9_RSTAT(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="4c0000007d0100000045000001060000001c02000000050000000000000000000400cb0000000500000008000000000000000500544950430003002e3a262600656e00000000000000000000"], 0x4c) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(r1, &(0x7f0000000000)=@abs, 0xfffffde8) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) 13:36:51 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:51 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) 13:36:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {0x0}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:51 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xfffffffffffffc99, 0x10000, 0x9, 0x5, 0x0, 0x5, 0x80020, 0x3, 0x4, 0x6, 0x0, 0x2, 0x604, 0x5, 0xffffffff, 0x7fffffff, 0xffffffffffffffff, 0xfcb, 0x1000000, 0xaf1, 0x6, 0x42a, 0x8, 0x3, 0xffffffffffff7fff, 0x0, 0x9, 0x3, 0x5, 0x7, 0xffffffff, 0x3f2a, 0x634, 0x9f39, 0x4, 0x800, 0x0, 0xffff, 0x5, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x9, 0x1, 0x7, 0x80000000, 0x8f2, 0x2}, 0x0, 0x5, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:51 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 13:36:51 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) [ 1455.141759] input: syz1 as /devices/virtual/input/input98 [ 1455.161920] syz-executor.5 (432) used greatest stack depth: 23040 bytes left 13:36:51 executing program 4: openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x10) 13:36:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:51 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:36:51 executing program 4: openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x10) [ 1455.309904] input: syz1 as /devices/virtual/input/input99 13:36:51 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="f6969ec0cd16f0d08e12f2f1ac6a9f85e1a902c5b1063deba92c5084b478e25020326fa2122203fb3b5555c1192dea", &(0x7f0000000040)=""/192}, 0x18) 13:36:51 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) renameat2(r0, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000040)='./file0\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) 13:36:51 executing program 4: openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x10) 13:36:51 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:51 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x8082, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:51 executing program 1: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) syz_open_procfs(0x0, 0x0) 13:36:51 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:51 executing program 1: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:51 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x8082, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:52 executing program 1: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x10) 13:36:52 executing program 1: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x10) [ 1456.184083] input: syz1 as /devices/virtual/input/input100 13:36:52 executing program 1: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x10) 13:36:52 executing program 2: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000c00)=[{&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000680)=""/202, 0xca}, {&(0x7f0000000780)=""/219, 0xdb}, {&(0x7f0000000880)=""/185, 0xb9}, {&(0x7f0000000940)=""/198, 0xc6}, {0xfffffffffffffffe}, {&(0x7f0000000a40)=""/194, 0xc2}, {&(0x7f0000000b40)=""/131, 0x83}, {&(0x7f0000000280)=""/20, 0x14}], 0x9) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) dup2(r7, r0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) write$UHID_CREATE(r1, &(0x7f0000000400)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000340)=""/172, 0xac, 0x2b4, 0x9, 0xe791, 0x1f, 0x1f}, 0x120) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ocfs2\x00', 0x860003, &(0x7f00000001c0)='md5sum,/\x00') dup2(r8, 0xffffffffffffffff) 13:36:52 executing program 1: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x2ae) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:52 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:52 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x8082, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:52 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:52 executing program 1: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:52 executing program 1: epoll_create1(0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:52 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:52 executing program 5: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) getpgrp(r2) r3 = fcntl$getown(r0, 0x9) r4 = syz_open_procfs(r3, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r5, 0x406, 0xffffffffffffffff) r6 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x800000000000000, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$TIOCNXCL(r4, 0x540d) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:52 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, 0x0, 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:52 executing program 5: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) getpgrp(r2) r3 = fcntl$getown(r0, 0x9) r4 = syz_open_procfs(r3, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r5, 0x406, 0xffffffffffffffff) r6 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x800000000000000, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$TIOCNXCL(r4, 0x540d) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) [ 1457.049797] input: syz1 as /devices/virtual/input/input101 13:36:53 executing program 2: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x200000000000002}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) ftruncate(r0, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) 13:36:53 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, 0x0, 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:53 executing program 5: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) getpgrp(r2) r3 = fcntl$getown(r0, 0x9) r4 = syz_open_procfs(r3, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r5, 0x406, 0xffffffffffffffff) r6 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x800000000000000, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$TIOCNXCL(r4, 0x540d) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:53 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:36:53 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:53 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, 0x0, 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {0x0}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:53 executing program 5: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r6, r0) 13:36:53 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) [ 1457.887579] input: syz1 as /devices/virtual/input/input102 13:36:53 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:53 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:53 executing program 1: openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x10) 13:36:54 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80800, 0x0) r1 = syz_open_procfs(0x0, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) 13:36:54 executing program 1: openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x10) 13:36:54 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:36:54 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:36:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {0x0}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:54 executing program 1: openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x10) [ 1458.780327] input: syz1 as /devices/virtual/input/input103 13:36:54 executing program 5: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r6, r0) 13:36:54 executing program 1: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x800}, 0x48000) getegid() ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) 13:36:55 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:36:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {0x0}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:55 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:36:55 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xffff) [ 1459.653154] input: syz1 as /devices/virtual/input/input104 13:36:55 executing program 5: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r6, r0) 13:36:55 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:56 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:56 executing program 2: epoll_create1(0x0) getegid() socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x7, 0x3, 0x40}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) 13:36:56 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1460.512703] input: syz1 as /devices/virtual/input/input105 13:36:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:56 executing program 1: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r2, 0x406, r0) r3 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000080)) 13:36:56 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r3 = fcntl$dupfd(r2, 0x406, r0) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000080)={0x1, 0x9, 0x7ff}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) [ 1460.608030] input: syz1 as /devices/virtual/input/input106 13:36:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:56 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r3 = fcntl$dupfd(r2, 0x406, r0) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000080)={0x1, 0x9, 0x7ff}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:56 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r3, 0x406, r2) r5 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) [ 1460.793801] input: syz1 as /devices/virtual/input/input107 13:36:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{0x0}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:56 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) r3 = fcntl$dupfd(r2, 0x406, r0) r4 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000080)={0x1, 0x9, 0x7ff}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) [ 1460.912202] input: syz1 as /devices/virtual/input/input108 13:36:57 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:57 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{0x0}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:57 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:57 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, r0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:57 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0xff) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60810000a9e314916e16ca76195c24c1d8e2f27a76523332b2296f160bdcd743ec64a8f9e9d132e21559d4549f09d37958e435", @ANYRES16=r5, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) 13:36:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{0x0}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1461.399497] input: syz1 as /devices/virtual/input/input109 13:36:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1461.487915] input: syz1 as /devices/virtual/input/input110 13:36:57 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000000)={@local, @broadcast}, &(0x7f0000000040)=0xc) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) [ 1461.607008] input: syz1 as /devices/virtual/input/input111 13:36:57 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000000)={@local, @broadcast}, &(0x7f0000000040)=0xc) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:57 executing program 5: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000000)={@local, @broadcast}, &(0x7f0000000040)=0xc) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) 13:36:57 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) write$P9_RRENAMEAT(r0, 0x0, 0x10) pipe2$9p(&(0x7f0000000000), 0x0) 13:36:58 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:58 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fcntl$addseals(r0, 0x409, 0x4) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) 13:36:58 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$VT_DISALLOCATE(r0, 0x5608) write$P9_RAUTH(r0, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x47, 0x1, 0x6}}, 0x14) write$UHID_CREATE2(r0, &(0x7f00000001c0)={0xb, 'syz0\x00', 'syz0\x00', 'syz0\x00', 0x8d, 0x800, 0x8, 0x7fff, 0xc8, 0x3ff, "f18b0368f305a08ca5b740a37afda616570e9382beaa9637142b78bcf92842d57b46c75364e5fb3c22f53f2b57e475f65cbe3e923a50127a128e727fb4fb704e9f0545252014db7f0012b60759bc879557bfe43b38fb4e4777a05f019e59752c95816f907e39c044cfe9bd3076636c8e2466c27e9e0a99a9cf81ba5e37cab02208c394f198e0fd7a2bb24b66fa"}, 0x1a5) [ 1462.183877] keychord: Insufficient bytes present for keycount 14 [ 1462.195571] keychord: Insufficient bytes present for keycount 415 [ 1462.203540] keychord: Insufficient bytes present for keycount 14 [ 1462.212113] keychord: Insufficient bytes present for keycount 415 13:36:58 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:58 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/177) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:58 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000240)=0x2cd) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x20000000}) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) pipe2(&(0x7f0000000140), 0x4800) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e23, 0x7, @mcast1, 0x1}, {0xa, 0x4e22, 0x0, @loopback, 0xfffffffffffffffe}, 0x2, [0x9b0e, 0x2, 0xca00000000000, 0xffff, 0x800, 0x7fff, 0x101, 0x100000000]}, 0x5c) 13:36:58 executing program 2: r0 = epoll_create1(0x0) r1 = dup2(r0, r0) recvfrom(r1, &(0x7f0000000000)=""/36, 0x24, 0x1, &(0x7f0000000280)=@x25={0x9, @remote={[], 0x0}}, 0x80) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r7, 0xffffffffffffffff) 13:36:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f0000000100)="4d01c07323edf6bc6b9a5ac667c83a3bc1d6d38e43b40f7ba77aab5715927749b90f3a162287fe9924f4624156f2bfa3eed10f79b3fa8c018b7ede0d186861ce74f34062c389fdd5fbcd5dba64bad8efa1d823a2a455c534f23f2a7277b761061655b528ea78fe994c719bb3913b1e0f81ff9f4f2dd0714466593762d1237ccba011ab960112554f48f338a24ba92d118cf36c78dd") write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x900, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) write$P9_RREADLINK(r1, &(0x7f0000000200)={0xffffff40, 0x17, 0x3, {0x7, './file0'}}, 0x28d) 13:36:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:58 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x200, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) tee(r0, r0, 0x7f, 0x1) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}}, 0x800) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000000)=""/34, &(0x7f0000000080)=0x22) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f00000000c0)=0x10000) 13:36:58 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0xfffffffffffffede) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000080)) write$P9_RLERRORu(r0, &(0x7f0000000040)={0x3e, 0x7, 0x2, {{0x31, 'selfsecuritytrustedvmnet0vboxnet1:&*GPL@*vboxnet0'}, 0x4}}, 0x3e) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x0, 0x4}) 13:36:58 executing program 5: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) [ 1462.480490] input: syz1 as /devices/virtual/input/input112 13:36:58 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0xffffffffffffffeb) 13:36:58 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:58 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) write$P9_RMKDIR(r0, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x0, 0x1, 0x3}}, 0x14) 13:36:59 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:36:59 executing program 5: write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x10) 13:36:59 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x108, r2, 0x339, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb30a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 13:36:59 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) write$UHID_CREATE(r0, &(0x7f0000000400)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000340)=""/163, 0xa3, 0xa2, 0x7, 0xfffffffffffff001, 0x4, 0x8001}, 0x120) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) 13:36:59 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) write$P9_RREAD(r0, &(0x7f0000000040)={0x8e, 0x75, 0x1, {0x83, "531743342c6c7e9f4152d33ffaee494c04ac7013e862820250f748f89d1394e30641752473a793f2c0645b4c1ef4a524f8fadf822fba5c08c64b1f2a91845e5ecd35354e8b9e3f5d263934b016c1afbd273de34a66961f3ebe34fc0508d03a204f7ab23892f8a85aae76ebb6e4e2b2dc448c83c0443cbb7beaf4cfd7c274de5d8ac5b5"}}, 0x8e) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', r1}, 0x10) 13:36:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:36:59 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0xa) 13:36:59 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) socketpair(0x17, 0x6, 0x80000001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:36:59 executing program 5: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x6}, 0x6}}, 0x18) socket$netlink(0x10, 0x3, 0xe) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000080)) write$P9_RRENAMEAT(r1, 0x0, 0x10) 13:36:59 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/relabel\x00', 0x2, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) [ 1463.377012] input: syz1 as /devices/virtual/input/input113 13:36:59 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:36:59 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:00 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:00 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v2={0x2000000, [{0x200, 0x3ff}, {0x6, 0x1}]}, 0x14, 0x1) fcntl$setlease(r0, 0x400, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:00 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000140)={0x104, 0x3f, 0x4}) write$P9_RRENAMEAT(r0, 0x0, 0x10) write$9p(r0, &(0x7f00000001c0)="76be4ae74fcb632cfd894c56812f229483eb233fa9de610543e3e6c6964396efdc4e9da7fcf53198f1b74cbf641a0f28c384c28114fa72d4910f283a353ffe1e78d1b769f63422311908e9b9f2ee9a18f65f5329b382b920955e724684cc3c6434b9f9e24ab6dd12b83f9040f3794d7e3e0279844151ea2274bdcf9a03932f840d1a0ae8ca69c1132972f6c274cf86d8c67c7815ef46ddc4219c1f9e3568534ef33a0d0889545af4fb4958557699c4e3f28336ff6e154d4c98998b1dfb3661d4f5a8da3874fb2f06d9fd63a1bfe5ba7631575b053b00fd5cd78b2692e30dab2e6236ef1c6e0649", 0xe7) flistxattr(r0, &(0x7f0000000000)=""/134, 0x86) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x7) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) 13:37:00 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000440)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xfc, r7, 0x10, 0x70bd25, 0x25ffdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdf1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4000000000000000}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffff7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5c6}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffffffff9aca}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x3d}, 0x40000) dup2(r6, 0xffffffffffffffff) 13:37:00 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @initdev}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) accept(r0, &(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x80) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000480)={0x0, @dev, @local}, &(0x7f00000004c0)=0xc) accept$packet(r0, &(0x7f0000008a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000008ac0)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000008b80)={@dev, @dev, 0x0}, &(0x7f0000008bc0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000008c00)={'team_slave_1\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000008d00)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000008e00)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000008e40)={@dev, @multicast2, 0x0}, &(0x7f0000008e80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000008f00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000009240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000009200)={&(0x7f0000008f40)={0x290, r1, 0xa0a, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xf4, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}]}}, {{0x8, 0x1, r6}, {0xe4, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r8}, {0x4}}, {{0x8, 0x1, r9}, {0x80, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 13:37:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, 0x0, 0x0) 13:37:00 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000001c0)) write$P9_RRENAMEAT(r0, 0x0, 0x1) fallocate(r0, 0x0, 0x6, 0x8) flistxattr(r0, &(0x7f0000000000)=""/62, 0x3e) statx(r0, &(0x7f0000000100)='./file0\x00', 0x500, 0xfff, &(0x7f00000002c0)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x440040, 0x0) [ 1464.153709] keychord: Insufficient bytes present for keycount 225 [ 1464.173508] keychord: Insufficient bytes present for keycount 225 13:37:00 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x33) 13:37:00 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0x1, 0x808000000000000, {0x57, 0x8, 0x6, {0x0, 0x800}, {0x100000001, 0x3}, @rumble={0x5, 0x81}}, {0x53, 0x87, 0xfffffffffffffc00, {0xe7, 0x1}, {0xf0, 0x3f}, @ramp={0x5, 0x9, {0x9, 0x2a17, 0x3f}}}}) 13:37:00 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x7b6, 0xfffffffffffffffc, 0x4, 0x50d, 0xd, 0x2, 0xa73f, 0x4, 0x0, 0x9}) write$P9_RRENAMEAT(r0, 0x0, 0x10) [ 1464.257615] input: syz1 as /devices/virtual/input/input114 13:37:00 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:00 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x1cd704e1) write$P9_RVERSION(r0, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0x204, 0x6, '9P2000'}, 0x13) 13:37:00 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:00 executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000380)=r1) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x20042, 0x0) write$P9_RRENAMEAT(r2, 0x0, 0x10) 13:37:00 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) fchmod(r0, 0x17) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)=""/123) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0)) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:00 executing program 2: epoll_create1(0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000800) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)="169b90a9e14d78f6131741e4163232f1b088", 0x12, 0xfffffffffffffffa) getegid() ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) syz_extract_tcp_res(&(0x7f00000002c0), 0x4dd, 0x8) dup2(r6, 0xffffffffffffffff) 13:37:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, 0x0, 0x0) 13:37:00 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) write$P9_RLCREATE(r0, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x10, 0x0, 0x3}, 0x401}}, 0x18) write$P9_RSTAT(r0, &(0x7f0000000040)={0x5f, 0x7d, 0x1, {0x0, 0x58, 0x87, 0x2690, {0x11, 0x1, 0x2}, 0x8a40000, 0x5, 0x401, 0x3, 0x3, 'GPL', 0xe, '/dev/keychord\x00', 0xe, '/dev/keychord\x00', 0x6, 'vmnet0'}}, 0x5f) 13:37:00 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x80000, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) write$P9_RRENAMEAT(r0, 0x0, 0x10) write$nbd(r0, &(0x7f0000000100)={0x67446698, 0x1, 0x2, 0x1, 0x2, "7f5be697734b88203ff9367b1bce0a290a663e7179e7ed1dfcb84fc895b96dc4e77a6a2f67e567d2b57899d92b7450e16fc338ddc0d619df61c119b83e4c7159809ecf2597a84a8dd74ae0355df4e308f2625a6ed42989af5b379608812e0a129c120d82f23c70097cc0f1a2631755f1b5be122ccb9afd8dce1f481b1a07593b6bdf3043949be3bc4f7089fc7e47f42c5412c82f36"}, 0xa5) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1465.103668] input: syz1 as /devices/virtual/input/input115 13:37:01 executing program 1: r0 = socket(0x5, 0x800, 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000000)=""/22, &(0x7f0000000040)=0x16) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @loopback}, {0x307, @random="b41f75d4c4d7"}, 0x8, {0x2, 0x4e24, @remote}, 'lo\x00'}) 13:37:01 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x2003d, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0xa, "32459d2167eafc2c16f9"}, &(0x7f0000000080)=0x2e) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:01 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000780)=0xe8) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000080)="24a0131cb4cd8fd416016ea411274dee755275a4a8f7b41b32145faa5267956a214d8432e3f63256662825cebc29b552bd39c1c7a854f170de7c9fe8560f9754ecb4ee7ee36368585ee41213895ba4d0da69ec57b92d49a0bc7ba78ef56dede21b03b3caa00af3bcdecd1b99887a7b15162ffccfd88783048cea056643662a186e55e073d9be470c10acf37653921052dd2ca37a531e0ea82f3ece92bf7a6aa6213e86adb063135f1f023baadb7d4b0ba714c6a5325a472bd1b2e72b4a5348831cf90641300d0dad5e66238d9b2dc671baf856d83002d70e4e2288568971110d2c463a608c944a37eaeb7584a5b54c437130b2295b36361cefac", 0xfa, 0x9}, {&(0x7f00000001c0)="3d505ed2eead9990725928efc8439c0c2c923c09e8a85fb9234d5500477bd6854bbeeab259b626b3300ce2b0f9b332cd3202dbb6c4c25e64447afe2e2c490ba08d877d921bb2cf7da7e09fc56e10af84", 0x50, 0x200}, {&(0x7f0000000240)="cc46be40d4270609503ef8dd600c072b5363e2517ab3720fc36a603d2ff875f9a01eafb2efd996ae9eff901345b75a", 0x2f, 0xc718}, {&(0x7f0000000280)="9c4c9876f8f176e110188bf3be456871238fab0ff4383305a5112cb4408e6269eca542a78dbdcf5c2d5569d88c16982f7faba5f71a64593cb7b66a2f7e8e79077e8ce906c7f87afe89a63ac5ac823be7a4d8ba2ad4ba61540a949da11e340510fc353a1e64e9fcb0646ff2f692719346ba5d0899bab4537d05e7700f6f5ffcb3a41b901fb3b642a7b14f6dd5cf209c7dff37c987e4a6d19371634625adf3fb9f2e1644e22d5122ab87ea03e6776b5369c5b3f1d958facf51bf4ee6cc278957aa34a50955784e04478bc268344f980b39a23a196de5ead3de6e0c2e497a7badf835acf9922166d6a5cb77bc9b01f642a660939496209ac75d486405ad12", 0xfd, 0x5c}, {&(0x7f0000000380), 0x0, 0x1}, {&(0x7f00000003c0)="33a8c26104a4f65b0b04ff3cb5e8665dab9c219e6c2f688a9cc6297393f348b8f3590273df622175a95757d6a86b7f0888e671b703b031e11fca9da3e1cfd9855e0152c5c699f9b2bb6fcd909af917f14ffc8e06b280ea68a34c21cf743abfdfa4e1b5730f945a219f93d72eb07b9a0b5917c6a10288d94ba2e09dd04d6a8d0976a12dc0b2c8ee86d743ddd577c028cd26f9cd80d74617aa6dfc5b048370726be7548833784e2ecda3d5c761d42e74162a94aea0fcd0e08691b89935cf9e370a77e82999e13e99c8d176f310ce5f7461e1d514214b99d2903240d425e9e2b49438656052ebd3acc32d49879e7fa98a", 0xef, 0xfff}, {&(0x7f00000004c0)="9a98f58a9170a53a99d60863065102cb15989cac8b12f4a374095306b8e820262752c33f10ddee6fade994fffe793694ddffa87bed4766577b5eb940a3d8d71a15c80609c682022ea7887684fdba0a1fc98b96b86b1c1502645c9e9f5d3c92eb289c80e61c8eb75c5ac11f1db1c174229ca9f232fb297b4e420ecd5ab6b72217f0fbc02d978907b1a388967146f9a33da5de97543a7de81b827d20b9aab890e700d5cd840f3d6daa080e9da53b011ad20cc207efa2248ea670f750bd6e97b217c9543a3753cac0e6aa714f0ca8958a95d90ebe80a6df0e96072a", 0xda, 0x7}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB='dots,nodots,nodots,debug,nodots,smackfsroot=GPL,hash,uid>', @ANYRESDEC=r1, @ANYBLOB=',obj_type=nodevem1loposix_acl_accessP,uid<', @ANYRESDEC=r2, @ANYBLOB=',dont_appraise,fowner>', @ANYRESDEC=r3, @ANYBLOB=',ekid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) write$P9_RRENAMEAT(r0, 0x0, 0x10) [ 1465.261402] FAT-fs (loop5): Unrecognized mount option "smackfsroot=GPL" or missing value 13:37:01 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:01 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e5"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) 13:37:01 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:01 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="281e0c48ab26bda34354979def28d935ce82eb62f87c608c4d194b10e8c51c862643e26fa74581adbdd72ccb6e48d269991791909715409a2277dbc308428279231402471cd443e653a36a4b57ce66677e262ebca797145026256abd1f2d917c2a61043388266b6051c8b851aba182ebb2edd519fd7012519582e12c7577de0ceb33e8853734eb3e0d1887c993e84e9f03a671568fcbe0ab92027dea75bcc935a7de7b76fc180b0bc5c59aa4d3ac3aa4a0167c4c89cf0c947c3d82dbac442128e3a8690f17bcddebec06259bc7c26df2bd89204361c3cff726f2b6004bce2ba9b123ee90cf7df80914a554c8e6f1214acac1574b2f938ee13ecd", 0xfa) write$P9_RRENAMEAT(r0, 0x0, 0x10) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) 13:37:01 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000200)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) write$P9_RVERSION(r0, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0xffffffffffffffff}, 0x7, 0x3e, 'id0\x00', 'timer0\x00', 0x0, 0x7ff, 0x3f, 0x4, 0x7f}) 13:37:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, 0x0, 0x0) 13:37:01 executing program 5: write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x10) 13:37:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:01 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) recvmmsg(r0, &(0x7f0000001900)=[{{&(0x7f0000000080)=@can, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/16, 0x10}, {&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f00000004c0)=""/72, 0x48}, {&(0x7f0000000540)=""/125, 0x7d}, {&(0x7f00000005c0)=""/250, 0xfa}, {&(0x7f00000006c0)=""/253, 0xfd}], 0xa, &(0x7f0000000880)=""/192, 0xc0}, 0x3f}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x80, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/118, 0x76}, {&(0x7f0000000a40)=""/102, 0x66}, {&(0x7f0000000ac0)=""/245, 0xf5}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/135, 0x87}], 0x5}, 0x5}, {{&(0x7f0000000e00)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000e80)=""/95, 0x5f}, {&(0x7f0000000f00)=""/186, 0xba}, {&(0x7f0000000fc0)=""/239, 0xef}, {&(0x7f00000010c0)=""/148, 0x94}, {&(0x7f0000001180)=""/232, 0xe8}, {&(0x7f0000001280)=""/38, 0x26}, {&(0x7f00000012c0)=""/74, 0x4a}, {&(0x7f0000001340)=""/62, 0x3e}, {&(0x7f0000001380)=""/91, 0x5b}], 0x9, &(0x7f00000014c0)=""/216, 0xd8}, 0xb2f}, {{&(0x7f00000015c0)=@ipx, 0x80, &(0x7f0000001800)=[{&(0x7f0000001640)=""/144, 0x90}, {&(0x7f0000001700)=""/21, 0x15}, {&(0x7f0000001740)=""/166, 0xa6}], 0x3, &(0x7f0000001840)=""/172, 0xac}, 0x200}], 0x4, 0x100, &(0x7f0000001a00)={0x0, 0x989680}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001a40)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000001b40)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001b80)={{{@in6=@mcast2, @in=@empty, 0x4e20, 0x3, 0x4e23, 0x0, 0xa, 0xa0, 0x80, 0x0, r1, r2}, {0x0, 0x3, 0x9, 0x9, 0x7ff, 0x1f, 0x8358, 0x7}, {0x80000000, 0x7, 0x9}, 0xfffffffffffffffc, 0x6e6bb8, 0x2, 0x1, 0x3, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x10}, 0x4d3, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x3, 0xd510, 0xd4dd, 0x4, 0x5}}, 0xe8) [ 1465.941066] keychord: Insufficient bytes present for keycount 15 [ 1465.953553] keychord: Insufficient bytes present for keycount 15 13:37:01 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) 13:37:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1466.003082] input: syz1 as /devices/virtual/input/input116 13:37:02 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:02 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[], 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:02 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:02 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000002c0)=""/234) 13:37:02 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) syncfs(r0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000140)={0x13, 0x16, &(0x7f00000000c0)="b56774298c8dbd3e20b3f2f0bb76f1d4845d9910e3e3"}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'veth0_to_bond\x00', 0x200}) 13:37:02 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0xf2) 13:37:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) 13:37:02 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000300)=[0xee00, 0xee00, 0xee00, 0xee01, 0xee01, 0x0, 0xee00, 0xee00, 0xee01]) getgroups(0x4, &(0x7f0000000340)=[0xffffffffffffffff, 0xee01, 0x0, 0x0]) getresgid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r7 = getegid() lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0xe3f1d8e1c44b452b}, [{0x2, 0x4, r1}], {0x4, 0x5}, [{0x8, 0x2, r2}, {0x8, 0x2, r3}, {0x8, 0x3, r4}, {0x8, 0x0, r5}, {0x8, 0x5, r6}, {0x8, 0x3, r7}, {0x8, 0x2, r8}, {0x8, 0x2, r9}], {0x10, 0x1}, {0x20, 0x3}}, 0x6c, 0x1) 13:37:02 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) chdir(&(0x7f0000000000)='./file0\x00') r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) 13:37:02 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x40800, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xfffffffffffffff1) ioctl$int_out(r0, 0x5460, &(0x7f00000000c0)) write$P9_RRENAMEAT(r0, 0x0, 0x1c8) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x21) r1 = open(&(0x7f0000000040)='./file0\x00', 0x294000, 0x164) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x9, {0x3ff, 0x20, 0xfffffffffffff800, 0x16d, 0x3, 0x800}}) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8) 13:37:02 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x2f972a7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)="c53cd274ededd95470aa2a82cfa0f86ae283a977f6f481a9052d80a07baffd748bd3ecad5086bc70f34d4104d4502e29a5647dcb67bc95195519fd151968f2d52e4d38579cd7c317a73db4401285e76c3031ecfe63c146bf0f74bd1ee6370a3f8bfef119a3cfe294cd17fe5234a0ef8d6d9f8f909aa006448448b2b4b9de452eeee3030148c189134349dce83b0885b2d7526177d0c89bac11b7dac5bb205e7296219594887739668b7d6b504d3d1b7565701b7bf104012bb6bf31e777f91c02aefe5842ba90eec8218b4097dc5c08ede7", 0xd1, r0}, 0x68) 13:37:02 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 1466.893349] input: syz1 as /devices/virtual/input/input117 13:37:03 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:03 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x2003d, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="dbb1789315ea35818bae5a5e7e07d4b5a5e0610b80f5ea27f406a35f44318dab5599230ca281c28d615eb8f6bb837ebbc20d8304e0987b05de5401e05dab30cc839887cf8814568bc2033ef943404ef11fd66831064b368ee22e04cf26fcc9c98d86ef2d8c1c6b3f463e413961e9565705c8eb830b2df811797d9740176af4b73ef9d6cd5e690d12daac27435bca89067bf9967c447afa96d02a71380b3349d2c877b0fbef7676a426e20e1f") write$P9_RRENAMEAT(r0, 0x0, 0xfffffedc) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000100)=0x5) 13:37:03 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/attr/exec\x00', 0x2, 0x0) fadvise64(r0, 0x1f, 0x5, 0x3) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/keychord\x00', 0x2003d, 0x0) getpeername(r1, &(0x7f0000000040)=@ax25={{0x3, @bcast}, [@bcast, @rose, @bcast, @null, @rose, @null, @bcast, @default]}, &(0x7f00000000c0)=0x80) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0x101, 0x2, 0xffffffff, 0x8, 0x3}) prctl$PR_GET_SECCOMP(0x15) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[], &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='ext2\x00', 0xa08000, &(0x7f0000000580)='/selinux/avc/cache_stats\x00') write$P9_RRENAME(r1, &(0x7f0000000180)={0x7, 0x15, 0x1}, 0x7) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x7c, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x185}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8be}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x88f}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0x50, &(0x7f00000003c0)={0x0, 0x0}}, 0x10) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000000)={0x47d, 0x6ec0, 0x1}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={r2, r3, 0x0, 0xe, &(0x7f0000000380)='/dev/keychord\x00', r5}, 0x30) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000240)={'nat\x00', 0x0, 0x3, 0x57, [], 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f00000001c0)=""/87}, &(0x7f00000002c0)=0x78) write$P9_RRENAMEAT(r1, 0x0, 0x10) 13:37:03 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 1467.374115] keychord: Insufficient bytes present for keycount 1 [ 1467.394648] keychord: Insufficient bytes present for keycount 1 13:37:03 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x2000, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffa) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x4000, 0x0) write$selinux_create(r2, &(0x7f0000000280)=@access={'system_u:object_r:passwd_exec_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x4}, 0x66) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000380)={0x34, 0x0, &(0x7f0000000340)}) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) setxattr$security_smack_entry(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.SMACK64IPIN\x00', &(0x7f0000000180)='\x00', 0x1, 0x1) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x161000) dup2(r1, r3) 13:37:03 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 13:37:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) 13:37:03 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) 13:37:03 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:03 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x100, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x19f) 13:37:03 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$9p(r0, &(0x7f0000000000)="7b39eb6119c80f6ced27731112adb347bc15b9af269779d74faf4c48ce205fe6a640ce22d4c0", 0x26) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:03 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0xfffffffffffffd02) [ 1467.764291] input: syz1 as /devices/virtual/input/input118 13:37:04 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:04 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x101000, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:04 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x210040, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) syz_extract_tcp_res(&(0x7f0000000040), 0x103, 0x201000) pread64(r0, &(0x7f00000001c0)=""/4096, 0x1000, 0x0) 13:37:04 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000001c0)=""/4096) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:04 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:04 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000240)='fd/3\x00') setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000040)=0x31c27109, 0x4) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x400, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000000c0)=""/79) write$P9_RRENAMEAT(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000180), 0x4) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={r3, @broadcast, @local}, 0xc) 13:37:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) 13:37:04 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) fgetxattr(r0, &(0x7f0000000000)=@random={'btrfs.', '/dev/keychord\x00'}, &(0x7f0000000040)=""/184, 0xb8) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:04 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x2003d, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540)='SEG6\x00') ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000180)) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044}, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400), &(0x7f0000000440)=0x4) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000003}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="800f0000", @ANYRES16=r2, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000480)={0x60000005}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000004c0), 0x4) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:04 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:04 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x210000, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 13:37:04 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) [ 1468.652264] input: syz1 as /devices/virtual/input/input119 13:37:04 executing program 5: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) write$P9_RRENAMEAT(r0, 0x0, 0x7) 13:37:04 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:04 executing program 1: openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0xfffffffffffffffb) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, &(0x7f00000000c0)={0x7, 0x4b, 0x1}, 0x7) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x8000, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x80000000000}, 0xb) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)={{0x10f, 0x5, 0xfffffffffffffffc, 0x16b, 0x2d3, 0x1, 0x386, 0x2}, "76e9329075c9224830f8fa2260f23816630b08a98f11283714e93f50d34c0871438be74022b2fbf18c6506b84fd7f52dfca6a733977484217bfea0676d666b4707dac13c79a3a5c342", [[], [], [], [], [], [], [], [], []]}, 0x969) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$P9_RRENAMEAT(r2, 0x0, 0xfffffffffffffed1) 13:37:05 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="28020000", @ANYRES16=r1, @ANYBLOB="000225bd7000fddbdf250f0000001400090008000100395100000800020000080000dc0004000c00010073797ac2b1858c7e3d3d56014cca6ce9ca30000000007428fc2400070008000100090000000800010006000000080003000400000008000400060000001400010062726f6164636173742d6c696e6b00000c00010073797a30000000000c00010073797a30000000000c00010073797a30000000000c00010073797a300000000014000700080004000500000008000400030000004400070008000300f8ffffff08000200050000000800040000000000080001001d0000000800030029ca00000800010002000000080001000f00000008000400040000000c00010073797a300000000034000200080001007f000000080002002000000008000200fffeffff08000200e30c00000800010065cd000008000200ffffff7f04000200680004001400010062726f6164636173742d6c696e6b00003c00070008000300810000000800010001000000080003000200000008000400060000000800040020000000080003000000000008000100190000001400010062726f6164636173742d6c696e6b00002000070008000200060000000c00030003000000000000000800010000000000100007000c000400f8ffffffffffffff2400060008000100080000e4030002000400020008000100ffff00000800010000000000300006000800010005000000040002050000000004000200040002000400020008000100370700000400020004"], 0x228}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@req={0x28, &(0x7f0000000440)={'rose0\x00', @ifru_addrs=@xdp={0x2c, 0x2, 0x0, 0x7}}}) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@getstats={0x1c, 0x5e, 0x410, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x7}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:05 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) write$binfmt_misc(r0, &(0x7f0000003400)={'syz1', "f637cc3ec7749c514cffbc7df89da7c25bcddd8e0f8ea1b598c00dd4f53a9575544c14714477a6da922158f4dfa6b9868a7a5757c9eb4d093200c093326dfcbcdc2e7e5fe710ded1e9c64596b392f7458e155278638267cc80e4800c7787cf07ad27a28c4b4fdf1f7cd822e77409e68c3e"}, 0x75) r1 = add_key$keyring(&(0x7f0000003540)='keyring\x00', &(0x7f0000003580)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$setperm(0x5, r1, 0x20) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000003480)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000034c0), &(0x7f0000003500)=0xc) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000035c0)={@rand_addr, @empty, @multicast2}, &(0x7f0000003600)=0xc) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000036c0)={@dev, @loopback, @remote}, &(0x7f0000003700)=0xc) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000003640)={@multicast2, @loopback, @dev}, &(0x7f0000003680)=0xc) readv(r0, &(0x7f0000003380)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/143, 0x8f}, {&(0x7f00000000c0)=""/186, 0xba}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/31, 0x1f}, {&(0x7f0000003200)=""/185, 0xb9}, {&(0x7f00000032c0)=""/158, 0x9e}], 0x8) 13:37:05 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x101000, 0x0) splice(r0, &(0x7f00000000c0), r0, &(0x7f0000000100), 0x7, 0x1) ioctl$int_out(r0, 0x2, &(0x7f0000000140)) write$P9_RRENAMEAT(r0, 0x0, 0x10) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x3) 13:37:05 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0xbd) 13:37:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0xe788, 0x0, 0x1}) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x80) lseek(r2, 0x0, 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000e40)=[&(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000d00)="20db1170b05408a8a3dce9b4ea02a07478ee0685465e2250e7e4d440b969755ec173bf65446678f561c29b4d63f25136a50c16e753a7d3e6fc534c93b5b937179f5102239531bd5d9c25cc414dedf95ac79a4f7198712bdfaff0ea20f61de1d0b2e8c03891857e8af07512567bb26d99b78fc3e00e0504852db62b686e42ccec055d432845c85ecf8e11c6bad69d4efdc42e684eccf928b19565c136e73f6e9efd652ccce7aa41770fa1c237167e552c7a250c2aa454ddd26299778d1a586322e0", 0xc1, 0x40, 0x0, 0x2, 0xffffffffffffff9c}]) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000080)=0x5) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000e80)=0x17, 0xfffffffffffffdcf) 13:37:05 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:05 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:05 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0xfffffffffffffffe, 0x20003, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x11c, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2600000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ce4}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x952a}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) poll(&(0x7f0000000040)=[{r0, 0x2081}, {r0, 0x8000}, {r1, 0xa040}, {r1, 0x4010}], 0x4, 0x20) write$P9_RRENAMEAT(r0, 0x0, 0x10) [ 1469.555938] audit: type=1400 audit(1551879425.444:142): avc: denied { relabelto } for pid=1265 comm="syz-executor.5" name="keychord" dev="sda1" ino=17290 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:scanner_device_t:s0 tclass=file permissive=1 13:37:05 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) [ 1469.597310] input: syz1 as /devices/virtual/input/input120 [ 1469.655868] input: syz1 as /devices/virtual/input/input121 13:37:05 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:05 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) select(0x40, &(0x7f0000000000)={0x5, 0x200, 0x0, 0x1, 0x80000000, 0x80000000, 0x100000001, 0xfff}, &(0x7f0000000040)={0x7fff, 0x2, 0xa73, 0x0, 0x8000, 0x6, 0x800, 0x80}, &(0x7f0000000080)={0x3, 0x3, 0x950b, 0x1, 0x1, 0x6, 0x80, 0xdc5}, &(0x7f00000000c0)={0x77359400}) 13:37:05 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) inotify_init() ptrace$getenv(0x4201, r1, 0x1, &(0x7f0000000080)) ptrace$peek(0x2, r1, &(0x7f0000000040)) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="e1869d2d650d052dd087f3d877b03677ba8e5abad6ebb21638120a8fb37814d53252144569b21336d93f2ad032e93588d1ef6310f46af355a831ef7c047eb3a575dff2ae9cf980a2ca29d7dfb3d23ba01858e140a0071152e0932e09d0f15f724dcda6dbad2080"], 0xffffffffffffff89, 0x1) getrlimit(0xa, &(0x7f0000000140)) sched_setscheduler(r1, 0x5, &(0x7f0000000100)=0xa99) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c) 13:37:06 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = syz_open_pts(r1, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x0, 0x531d, 0x80, 0x7, 0x19, 0x7, 0x0, 0xd7, 0xfffffffffffffff9, 0x3, 0xffffffffffffff2f, 0xfff}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a05]}, 0x45c) 13:37:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) openat$cgroup_ro(r1, &(0x7f0000002580)='rdma.current\x00', 0x0, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001a40)=0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000002500)='/dev/rtc0\x00', 0x400080, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001a80)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000001b80)=0xe8) lstat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001c80)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001cc0)={{{@in6=@ipv4={[], [], @empty}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000001dc0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001e00)={0x0, 0x0, 0x0}, &(0x7f0000001e40)=0xc) r9 = getpid() r10 = geteuid() getresgid(&(0x7f0000001e80), &(0x7f0000001ec0), &(0x7f0000001f00)=0x0) sendmmsg$unix(r2, &(0x7f0000002440)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001740)=[{&(0x7f00000001c0)="9cf6fc3f059cb3d0c98d6de676e4634079", 0x11}, {&(0x7f0000000200)="d414d2e4e5ca14bfccc0d3cada2fe84ce75154506b695da2bda0aff741c9ced7a69baf1e045305537c45ee37c2cdaa34d631ccf4c49b68fb6d5086d2f13600653d161b6ddb4708b7c567a89847e2f96844a8f45a70fe6df5eba688b6635a709852e206623ba530c4cb22e3afe804156d964227cce27a44a3a66da81ac8aecbb4e497c9ea55310b4743ac2ee2d21b7bb2302229f41355e2eb2864e8e9515cb0ba043fcc36f51919ca3e3dd423d66bb68b9a6d2de230dad879f8f8d0b27332a2735cfeaa48b9", 0xc5}, {&(0x7f0000000300)="d6f7b8e9a6b65c1b9fa062f63a711e0cdfb43062a766102db83e7706336bd3df1d66b817a023ca033687fbdd7a230e51a443f51ee8bb5e724904e06935b93f35830c396e1fc84b3c370f3005e877a08a0b22da15c6b8cd8732de1800a04d41b6419a3b039feeb4f3f691d68f85fd31bd339f7c2ed8e16271411dd93b3311180a5622fe8f8f53f7acc617500a0ec0e37ad484ad7128f466ef749cbadfdf5a92f9102a8a", 0xa3}, {&(0x7f00000003c0)="e2003e1bd983705dfe270256224da73330580e58e32c3504d9f8f49d5b5841b92f955529d84e36e46e6b54c1d0a0c141f02ac5798b3f2a08d97a43cfea18222404a73fa293388d5744d18fa49c7a21ac87a1e60eddb22ddc75518bcf36babf36506f1ebb1afbbca00f17baa03d17643b415be341db11679b0fea827b07b507f1355b5bf7f67ed4063f873b9e71f971bb76600b3c35d99cfb2aaff7840077c90638c4bc723a5915c6075e6140", 0xac}, {&(0x7f0000000480)="6fa26d09036ba6dea5315f", 0xb}, {&(0x7f00000004c0)="491f19afb6525b011dffe7e5a462032cd0416ca53ad7ba6bb786", 0x1a}, {&(0x7f0000000500)="9a2eb11924d520670ef5", 0xa}, {&(0x7f0000000540)="a1f88eeeba637730b819cbc098fc35d52280af3aa74e87a011404e40c9ec25483dfd4f99bf22cb986583889cee39ddd776b07b6cf18de41b5167068adb4da7c89e0046497a704c8f421f6cab7096b4953e9c34d2fd591883bbaa35d2bad4fc3e98fec521cc854d7293bc56894605cfddbe1b10f47354847e361a1de30edbbf2d71801cbf34e9fe698bea3406e8a56f2dc8e852c4e8831033e0ee717d0d36ee664a87384e6b645912b8ab3a9a282eeb98edd17ec40fc24765284710ce381e66b4747522a8c73674aa6b", 0xc9}, {&(0x7f0000000640)="67baf3f4b769dd56192987e5688b420d6cf9a618fcb11114497ac2b0304767f4c9613488d2c7030b1a1accf30c6fdcc1d398e6db9440404e8f4c9ad48347696bef5e235c09d67c9a2728833f7bf550daf09de4ac76ad8bd215bc15406e99732d59ca8d728af33eead5c3c1ba4c587a1a727dbedb0933e41be92065c67dc3a924631681b9e0a857694709ffa086eee584fb7ba47578b870b8806e820ceaab1ed18c99b456d1910eefab9b1bf95593fa7262c9752cdbe51e6616c1fbb7af8f2875c73b", 0xc2}, {&(0x7f0000000740)="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", 0x1000}], 0xa, 0x0, 0x0, 0x40004}, {&(0x7f0000001800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001880)="230961d71dd5b9a9428feef2943ca8fcd78de3651173111412890e8f28865f0e", 0x20}, {&(0x7f00000018c0)="db3ac3ca0a2790d1ed70f9d3ddddb9b10f9371b3db5c8d824ef14ddeebaf9cce6e4bc5db4c6f5301ca004b517de754a4fea316da20e680a641512f1f41d6aff21b374e433ee0bcd2ac12e934ea1d36facc076b14a9", 0x55}, {&(0x7f0000001940)="8d33414f4b2193a5274adea4c12a80c97f3edd5bec7ca5e411567e7b0e3de23d4623c2bc51da18871a8112de25397b0c320a97c330977ac6ecb872aaf3f7c260ceee8cd8406fbce02b4a6a62b4ea367056b89e872daecece6dd265e42bcc40940b558752c215187ae8c4f3cc5511d1ba5f2447c8b421f3339d06db3ff87cbef732de5c31ddf1ffd9625dba42d3b0859dc72e9d5f4d1d23d51bd25ca1879d45644d75871284fef4b1171ba4ffca3b", 0xae}], 0x3, &(0x7f0000001f40)=[@rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x20, 0x1, 0x1, [r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x20, 0x1, 0x1, [r1, r1, r0]}, @rights={0x18, 0x1, 0x1, [r2, r1]}, @rights={0x18, 0x1, 0x1, [r2]}], 0xe8, 0x800}, {&(0x7f0000002040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002380)=[{&(0x7f00000020c0)="7c1388e098830d87a47a92", 0xb}, {&(0x7f0000002100)="fb6605394814b299d59e7ace29bfb1e55a592d3dd195bfe6c04f3f26e365296a2a102e91a00a6dfda835edda0ee243c9942f52c99153e57c41cdce981e9364234d4bcace865befaa84519ed5691e5cd481ae", 0x52}, {&(0x7f0000002180)="707f6a1673b7772caee352c2986b42e371c690d69bc9648b21db3afd7f78d0518210c2ebcb8e304b4add40df75a7df0fe1ef9c55170db1041931ea561c78a061a7c944543fc6f045d9fc4d303f206ed5586803d9226a6e117188d0c7ae50dceeed3ecff9615b10bdcfa7a41be054c858c5f2ef29d6258f99043c1218499e6277a55f3768222a180c53a5b40a504204b1016613ac27204f0e78130d5d232ecfb0", 0xa0}, {&(0x7f0000002240)="8b33143e1148d994689a1e654772fece7ed98e108f3c3c7601899a4689", 0x1d}, {&(0x7f0000002280)="3ffce85873eaea32aeda970a99be1264cbd2a5bda1f2a30ca87134f14ef2e48584c3b700b9341cbfd5c73aea8cc2eb60432e864043118a26841c3a57a7c6cbac8ab09b09371d", 0x46}, {&(0x7f0000002300)="d7666c81cd1e4e3983461c5c587b23e7ceeef395a587df0bbe60bc30e033acf55ca3bf9805a403f589d2696f44c69b3812530311edd2ef75b774c7f3d8cab7881d4b15ffae", 0x45}], 0x6, &(0x7f0000002400)=[@rights={0x20, 0x1, 0x1, [r2, r2, r2]}], 0x20, 0x810}], 0x3, 0x40004) openat$cgroup_subtree(r1, &(0x7f0000002540)='cgroup.subtree_control\x00', 0x2, 0x0) write$P9_RRENAMEAT(r2, 0x0, 0x10) 13:37:06 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x4) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:06 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) prctl$PR_SVE_GET_VL(0x33, 0x6949) [ 1470.203121] input: syz1 as /devices/virtual/input/input122 [ 1470.215896] EXT4-fs (loop1): bad geometry: block count 16 exceeds size of device (1 blocks) [ 1470.279253] input: syz1 as /devices/virtual/input/input123 [ 1470.289939] EXT4-fs (loop1): bad geometry: block count 16 exceeds size of device (1 blocks) 13:37:06 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 13:37:06 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x400, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x4, 0x18000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x4010, r1, 0x0) tee(r0, r1, 0x4f83, 0x8) chmod(&(0x7f0000000380)='./file0\x00', 0x14e) r2 = request_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='\x00', 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)='%GPLppp1wlan0\x00') r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r3, 0x0, 0x10) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r4, 0x2, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x9, r3, &(0x7f0000000040)="8476fd16225a0f57100143223022bcfde3967ddb3d0bb7f457a078943d806a6de671b9d586461ec47853d5cb64fe545d8992fe94f8df1ed5363695cda5", 0x3d, 0x42, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x7, r3, &(0x7f00000000c0)="7f1c148e2c5058630a", 0x9, 0x3, 0x0, 0x2, r3}]) 13:37:06 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x4f54) 13:37:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400081, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1470.411724] input: syz1 as /devices/virtual/input/input124 [ 1470.476740] input: syz1 as /devices/virtual/input/input125 13:37:06 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:06 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x0, "9bd7e32539ae1d56256960f1b5cbd2f6ed06a873f334ce18c7315fab53f7fe2bd245d51438ef4e25f9e0858fa0fb23c525ff99e8e5aa66caaeadcdff77cc6d6e149b862a5abc2c28eb80c07998fa565c"}, 0xd8) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0xff, 0xffffffffffffffab, 0x5, 0x1840000000000, 0x8, [{0x2, 0xffffffffffffffc5, 0x40, 0x0, 0x0, 0x800}, {0x401, 0x6c9c, 0x4, 0x0, 0x0, 0x2000}, {0xee, 0xf9, 0x3, 0x0, 0x0, 0x8}, {0xfd7b, 0x80000001, 0x783f4e9b, 0x0, 0x0, 0x1}, {0x33, 0x0, 0x9, 0x0, 0x0, 0x8}, {0x0, 0x67d}, {0x2, 0x5, 0x3, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x4, 0x0, 0x0, 0xc00}]}) 13:37:06 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x6000, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:06 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x32f) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000240)={'yam0\x00', {0x2, 0x4e24, @rand_addr=0x6}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r1, 0x8, 0x8, 0xfffffffffffffffc, 0x9}) rt_sigtimedwait(&(0x7f0000000040)={0x3}, &(0x7f0000000140), &(0x7f00000000c0)={0x0, 0x989680}, 0x8) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x10001}) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000280)) 13:37:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r1 = gettid() r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0x50, &(0x7f0000001080)={0x0, 0x0}}, 0x10) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000001180)={0x3, 0x34, 0x11, 0x13, 0xa, 0xfffffffffffffffa, 0x3, 0x4c, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001140)={r1, r2, 0x0, 0xc, &(0x7f0000001040)='/dev/uinput\x00', r3}, 0x30) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r4 = dup2(r0, r0) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f0000000100)={&(0x7f0000000d00)={0x278, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x100, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x713}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4332}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @loopback, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x22e2a121, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @remote, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xffffffff, @rand_addr="52cc3a8320aac6f65c4fdbdf3e3c16e7", 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @remote, 0x1}}}}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffff7fff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f80)={0x0, r4, 0x0, 0x1, &(0x7f0000000180)='\x00', 0xffffffffffffffff}, 0x30) ioprio_get$pid(0x1, r5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000080)={'nlmon0\x00', {0x2, 0x4e22, @remote}}) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000000fc0)) 13:37:06 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x1000020035, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:06 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) dup3(r0, r1, 0x80000) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x2003d, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x7acd, 0xf0a3, 0x1c, 0x4}, {0x10000, 0x1ff, 0x7, 0xe0}, {0x3, 0x1, 0x84d, 0x80}, {0x61, 0xdd, 0x1, 0x7ff}, {0x8000, 0x8, 0x81, 0x5a1e}, {0x16, 0x0, 0x3, 0x4}]}, 0x10) write$P9_RRENAMEAT(r2, 0x0, 0x883ed67617c2779e) 13:37:07 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvfrom$unix(r0, &(0x7f00000001c0)=""/182, 0xb6, 0x2, 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x80, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) fsetxattr$security_selinux(r1, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:framebuf_device_t:s0\x00', 0x27, 0x3) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) [ 1471.113922] input: syz1 as /devices/virtual/input/input126 [ 1471.152250] audit: type=1400 audit(1551879427.044:143): avc: denied { relabelto } for pid=1384 comm="syz-executor.5" name="keychord" dev="sda1" ino=17290 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:framebuf_device_t:s0 tclass=file permissive=1 [ 1471.182641] input: syz1 as /devices/virtual/input/input127 13:37:07 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 13:37:07 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x8000) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80800, 0x0) write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) signalfd4(r1, &(0x7f0000000000)={0x6aa}, 0x8, 0x800) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r3, 0x0, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', r2}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x69, 0x4, 0x8, "e719ee585271c89c9f9f69c5f032a020", "5f922ee74e2819717c307bc805438cc432ca23ecc6a423911a779f0405bd508685b7421f7ac6ab7ab31ae2396b0edfea9b858ef1e46dc6ffd169d9fdd73ef6c5adbe71a93c650d867687a3c6e101cbf82786a0e6"}, 0x69, 0x0) 13:37:07 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x20039, 0x0) sendto$inet(r0, &(0x7f0000000000)="8fd8f3fd56038b9cc16c5fd908799a8d70dff5aed02b889ed0081d1fa4c805", 0x1f, 0x4c0d4, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) ioctl$TCSBRK(r0, 0x5409, 0x14c0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="eb0800000000000002004e21ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac14140c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x210) write$P9_RRENAMEAT(r0, 0x0, 0xfffffffffffffde3) 13:37:07 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x4010, r0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x4, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0x2c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x393c, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x1c}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x21, &(0x7f00000001c0)=""/33, 0x41f00, 0x1, [], r1}, 0x48) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000300)={@empty, 0x18, r1}) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000d00)={0x1, 0xf4, "8cf6463a8492d70f3fafd8eb5e5c64d7d98c3c2d1be5af1ad523c2c5e3e0ad86627a307a76b3b21650fb0cac93d84719cc81cde2ad2bd08373c0aeb2d01c2f70f4a40c289365b6d96e6527abae7a8b9ec6be21449f550c1e5814fe219084b7a607a93eaefa992e6a3365418c1992477d9b976c8749778049743cf68a1e127ca8b06875970e08c103ac06fe8f0fc893ac9f853cebd8c484229e268ee25bebc7fab3734ac0b2076120891f25d25f93992436f8fec0baecba1df2c0e8e7e579407bd3844bb27ccb508d2b52b5aa787d33ce5e378a0ac3fe22fa041edb4c99c3558b61e15acd88ed1bf135df074718834bd3543338b9"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) 13:37:07 executing program 5: time(&(0x7f0000000100)) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x4400, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:07 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 1471.677737] input: syz1 as /devices/virtual/input/input128 [ 1471.731725] input: syz1 as /devices/virtual/input/input129 13:37:07 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x123000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x110, r1, 0x102, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="4a7279dfc4788a198ec6114b00568cbf"}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x81}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd49e171438da45ac, 0x22}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x21}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7f5a}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:07 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x2, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:07 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x8000, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x7) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000040)={0x6, 0x8}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 13:37:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) fstat(r0, &(0x7f0000000100)) readv(r0, &(0x7f0000001e00)=[{&(0x7f0000000080)=""/24, 0x3d1}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110, 0x17c}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228, 0xfffffffffffffd01}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], [0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}, 0x45c) 13:37:07 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0xa000, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0xfffffffffffffdde) [ 1472.031239] input: syz1 as /devices/virtual/input/input130 [ 1472.056559] input: syz1 as /devices/virtual/input/input131 13:37:08 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 13:37:08 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0xfffffffffffffcbb) vmsplice(r0, &(0x7f0000001700)=[{&(0x7f00000014c0)}, {&(0x7f0000001500)}, {&(0x7f0000001540)="5ad6e422f5019984050b9b1b444c7335b5cf80e151837bd926c3b09929c9fcd546fc59f79fb43980e9d39540b0df1d500192f36df58af2f821c21b8a8e88baf559cdf3c9f92623ed0bb1e859cbee3c28270f783631365fe42bbf9ec5304f7456d8f19fd6a923caca959bd307a1d1b0257c5826f899614c16fb758ae68135af9187c6f8776f569522c336f7fe9ed096105a14a41d46114dc584dbd71b4ece4e9e8964ba81", 0xa4}, {&(0x7f0000001600)="c5c4a4dbdf61d6656a544770975d3f03cc3c49a41d1d4556c739956b", 0x1c}, {&(0x7f0000001640)="6c4f81d89e3f5e7307fd9341b21d18a26176b2f5340dcc8d6aba5cd454ca99189aa84f4f1b57072cc9250856860177cbee0aa6f5647f9dba4314fadab121e2e3bb21aaf898cd4d462d40885f82d265cf0efd0dd428faac27706e57bc376609e229e4318d5f9c6523ef1119e71e264ed713585c0c0962f049fe497f9b8240a94bad6a5695bd33bbcf01268ed655", 0x8d}], 0x5, 0xe) vmsplice(r0, &(0x7f0000001400)=[{&(0x7f0000001780)="693ea114f2ba05e6d8b9bcdd7547b69f9923637e64d82452fa2e877a48482bb33d873b4c4fe7140ae85cbe8c6f1343377a8f7d7e757471e3efa98ac1dd614c2a97f12c68993f7541b064e5fd5c690cae1865751bce07ef2e99a70f9f8972a40d9ee9e4b8f4910fafe34ace90299637ca4fdbd02701b9b3e3716a1d9298d4167c7b2b4eb2254cdf69081cf0d6338083df3e5cc28d8c63c7d86a2a91b48c8f5a95078fd931498ad82be6e02957247279968d5c910762a8f0bfb10ab685b1d48d0dee4bb93016de", 0xc6}, {&(0x7f00000001c0)="6ea71750f80f7f2f265131daa165e5c379c471193e1b81abe69799e51839281be877b7baccde4f1eaa16ae509d0f1d789d74cd663b6985c039677d54641df713839fb1edb8d89717c20db5079ef75553df50a3fd6978d579ad92fc4a59679374dc717ea8fc63ee3484cab9a0fcfb1fe9759de6ad9161ced26a3040daebadd74f18910489302d8f4d3e992f11e59dbcdf1b938534d68775d08a9236b5e4f15baec7aaa9346333b884fb2c51658eb5d2647d6b4ab249c19e", 0xb7}, {&(0x7f00000014c0)="62d72811a08b197af6d57a143b314c730eac25d66270224c1130466db3d83097f52f080c7f32f966d628cc638040b87d7078004fdcb911fda38f0a97d661023edb4f4750de14780afd85e7d8cf5c0636896376798b04f407f53f648a4c94b1673e0eb6", 0x63}, {&(0x7f0000000280)="6ee4d7cbee511802e6b978938d6293494805f830912dbe2da2dd6a3d9d61166d6898", 0x22}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="5e74fb173040796c997d8880eb67f1d3fdc8353df074786081efc56feec1ddb78241193a7d6ce234353e9d7bc5aabd37265c8d86514b565ebcdda0456455abb0471831242bc6da32b73d4f6c76cc066c5ab8f23fc5f3ca7478c537e3f5c2b94f9b43ca6bd458c68e0ed056b1ba0f85eca316a3490fb08b", 0xfffffffffffffed8}, {&(0x7f0000001340)="74d44476250783051dd8d7fc3cb1192ee7f9712e4a04194751709ef48226a8df2ef75f646f3a119b15a2d0f2cde95cf1e1", 0x31}, {&(0x7f0000001380)="0c8b788518a75a11c56c2dd7512b93a77c5890f10281fc22596995b9326adb031b56e75e45643fda696d44778d1ff12265021a0f94ab83e5ec4220", 0x3b}, {&(0x7f00000013c0)="d815d51d29f949854ce7e6cbdbce1d390c", 0x11}], 0x9, 0x6) 13:37:08 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000000d00)={0x0, 0x2c, 0xc568b0c62448cd95, @tid=0xffffffffffffffff}, &(0x7f0000000d40)=0x0) timer_gettime(r1, &(0x7f0000000d80)) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {0x4000000000000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x2) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/access\x00', 0x2, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000100), 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) 13:37:08 executing program 5: write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r0 = inotify_init1(0x80000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000080)='\\/md5sum^\x00'}, 0x30) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x7, r1}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000040)=[0x8]) 13:37:08 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) [ 1472.185138] input: syz1 as /devices/virtual/input/input132 [ 1472.244002] input: syz1 as /devices/virtual/input/input133 13:37:08 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:08 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x80, 0x0, 0x7}}, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:08 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "f23653e0a8b2941e47469b98f7e67bc013adaab30d1cfce5"}, 0x28) 13:37:08 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RSTAT(r0, &(0x7f0000000000)={0x67, 0x7d, 0x1, {0x0, 0x60, 0x40, 0xdc, {0x28, 0x1, 0x8}, 0x800000, 0x101, 0x0, 0x8, 0xe, '/dev/keychord\x00', 0x11, 'posix_acl_access*', 0x0, '', 0xe, '/dev/keychord\x00'}}, 0x67) write$P9_RRENAMEAT(r0, 0x0, 0x10) fcntl$setflags(r0, 0x2, 0x1) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x400, 0x1, 0x8, 0x40, 0x101}, 0xc) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000000c0)=0xb48) ioctl$KDADDIO(r0, 0x4b34, 0xf3) 13:37:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x800) write(r1, &(0x7f0000000140)="88d19c747b902d8ccee2e347f682d220f7366183fba030b5f6f57e6110644bd3715bb1df4b18", 0x26) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000d00)=ANY=[@ANYBLOB="e0000001ac14141109fea6568cfd8197912dcb45f33faca80100000005000000ac1414bbac1c141e00ae000000000333ffffffff67b1974a5cb8c51560625756"], 0x24) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = fcntl$getown(r0, 0x9) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r3) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:08 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) inotify_init() ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000000)) write$P9_RRENAMEAT(r0, 0x0, 0xd) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_rx_ntuple={0x35, {0x11, @ah_ip4_spec={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x40}, @usr_ip4_spec={@dev={0xac, 0x14, 0x14, 0xa}, @multicast1, 0x80, 0x1}, 0x8e5b, 0x194, 0x7fff, 0x81, 0xffffffffffffffff}}}) [ 1472.928734] keychord: Insufficient bytes present for keycount 97 [ 1472.941690] keychord: Insufficient bytes present for keycount 97 [ 1472.949514] input: syz1 as /devices/virtual/input/input134 13:37:08 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10a, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x9) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) 13:37:08 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 13:37:08 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) [ 1473.012497] input: syz1 as /devices/virtual/input/input135 13:37:08 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x4129}) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) 13:37:08 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x20000002003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:09 executing program 5: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) dup(0xffffffffffffffff) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x8000, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x9b4aa3ca66c0b78) 13:37:09 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:09 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x80200, 0x0) write$9p(r1, &(0x7f0000000140)="92cc88af4325b7dc40dd2362db4f2345b73d073f42df0fdce75fc3ceb8a3f377c4f415cf00ced7729f93ba4ecb4a2ba63dff70491369c9e9d4047373b9095616438141a1fe91c1ea021f1370aa8c8e0da673eeaa1740ecf9d3019dd6f33c9b191e8276d8de9279ec8e1c20b44cff8657c43d5f06b1471b31c405b85c513bf43978f3a7da0e6326318e7304ae72ba5700678ed814934b0ee0237ab2d7bd5a6d8f09", 0xa1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x200000, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:09 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) clone(0x200900, &(0x7f00000001c0)="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", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="d15f96937b8fad7065f3d5f953f95c77f6b4121378d750d9c62a01af2f8b1c55c8340733f6a3e7f65506c4") 13:37:09 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) write$P9_RRENAMEAT(r0, 0x0, 0x9) 13:37:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VT_RELDISP(r1, 0x5605) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:09 executing program 1: syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x60, 0x2000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x9, 0x8, 0xff, 0x90000000000, 0x2, 0xffffffffffffffff, 0x6}, 0x2c) r1 = dup(r0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000080)=""/6, 0x6, 0x800, 0x7, 0xf3, 0xfffffffffffffffe, 0x3}, 0x120) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x400000, 0x0) sendfile(r0, r1, &(0x7f0000000280), 0x80000000) write$P9_RUNLINKAT(r2, &(0x7f00000002c0)={0x7, 0x4d, 0x1}, 0x7) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) write$P9_RRENAMEAT(r2, 0x0, 0x0) 13:37:09 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x969, 0xfffffffffffffff9, 0x5, 0x1, 0xffff}) write$P9_RRENAMEAT(r0, 0x0, 0x10) [ 1473.805933] input: syz1 as /devices/virtual/input/input136 13:37:09 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 13:37:09 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x20000, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x20039, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) 13:37:09 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x1, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='/dev/keychord\x00') mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0xa0830, r1, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) [ 1473.861583] input: syz1 as /devices/virtual/input/input137 13:37:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) rt_sigaction(0x7, &(0x7f0000000100)={&(0x7f0000000000)="c4e1c1c24dd400410faef667f3ae3e660f3a6226fd8fe97880430ec4a2dd99aa05000000660f58b0fc8f46fcc4a3a57c756f0836450f0f3e0d437422", {0x7fff}, 0x8000000, &(0x7f0000000080)="d94730c4a13df811f20f5c7d05c4416d76bd90b85fadc4e2b5bb9c4477000000f336c0d3b3d073c7c4a191ea5521f0460fbb410a26f0087cad04"}, 0x0, 0x8, &(0x7f0000000140)) 13:37:09 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$9p(r1, &(0x7f0000000000)="4673298a3b2fc285f3cee33ecc2918d3b517d1978b5b7a7eeb708ed2a3bf8866a45e1da259", 0x25) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) [ 1473.968120] input: syz1 as /devices/virtual/input/input138 [ 1474.025405] input: syz1 as /devices/virtual/input/input139 13:37:10 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:10 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:10 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setstatus(r0, 0x4, 0xf0dd1431659716ef) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0xfffffffffffffd64) fgetxattr(r0, &(0x7f0000000000)=@random={'btrfs.', '*)mime_typetrusted\x00'}, &(0x7f0000000040)=""/198, 0xc6) 13:37:10 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) ftruncate(r0, 0x20000000) 13:37:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000], [0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x45c) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:apm_bios_t:s0\x00', 0x20, 0x2) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:37:10 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) 13:37:10 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1b) [ 1474.688235] input: syz1 as /devices/virtual/input/input140 13:37:10 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 13:37:10 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x39e) 13:37:10 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x27c, r1, 0xc00, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7058}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x669a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}]}, @TIPC_NLA_BEARER={0x174, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x8001}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7fff, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5e75b536}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5f7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @empty, 0xe5}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe00000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @remote, 0xfffffffffffffffa}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffb7e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x840}, 0x4000010) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r2, 0x0, 0x10) 13:37:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) 13:37:10 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) syz_emit_ethernet(0xffb6, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0xffffca88}}}}}, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) pipe(&(0x7f0000000000)) [ 1474.865454] sit: non-ECT from 172.20.255.187 with TOS=0x3 [ 1474.872973] sit: non-ECT from 172.20.255.187 with TOS=0x3 13:37:10 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 1475.481489] input: syz1 as /devices/virtual/input/input141 13:37:11 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000140)=0x3, 0x4) write$P9_RWRITE(r2, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x2}, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:11 executing program 5: r0 = inotify_init() signalfd(r0, &(0x7f0000000000)={0x6}, 0x8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x215, @local, 0x80000001}, 0x1c) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) r3 = add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)="f811b2a59bac02a1a4db812d37e4ba0daaefce4ec810dbeee8b330bcf1696cadd343831e24de9757089f93d5a7cfa271aae1713437f03518d8dc7dabc5123f466486ed0328f8a8ccda7947105f22faf68daa8778978072fb8f8e7cb740425a0d341bf78173c6e0409aeef7dbc8376773bcbe8e8e5b9fe70296b4a4067a80e549ce9d40e3dc696219a45e035342833d15c714d0dd92ea77a5860833b92fef05e9e9a3eaa5f13207eb9a2d62bb72046e4f30facd4d3780f2bebff1db217df5b45fa6a69be57d3e1d10555d56ff4485c73aad62337b5e09ffe07f4b3d28cee612211b54284e4eb329ef1e7a026fa6", 0xed, 0xfffffffffffffff8) r4 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="73b55a54d86730433a5923e0d7a5cc67608c5b45ee954dda67c34a", 0x1b, 0xfffffffffffffff9) r5 = request_key(&(0x7f0000000340)='big_key\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/keychord\x00', 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r4, r5}, &(0x7f0000000440)=""/131, 0x83, &(0x7f0000000640)={&(0x7f0000000500)={'rmd160\x00'}, &(0x7f0000000540)="809d7a9fd7f0f3039bbc4fa6ca5d4731510a23ca4385d68d805716c3d5742fcc9c39878caaf5bd60eedbf2949d950372598f67b27ee897dea13bf414efed0db8d1ba5245e4d713ba9553177d7ad02624e92543e950c6b0d9cef599757d5fe68054e558fc3ceeb31103e12422b20382f41b73df27c1b61805f847a290258f082fbfd4fa69ae4f09abe291b1ba2572af10b689b12481a3f03d68eae533a5125f2eb4ca42e180e2ba23928b08b92e179e50c7663a01349cdfa3718a858cf5b2b883eed54c6a84d884c4ae230509caa85062e26b95469104a7db614c2f77d0da99355adfd26ff52327c6ba", 0xe9}) write$P9_RRENAMEAT(r2, 0x0, 0x10) 13:37:11 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xcc) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) 13:37:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:11 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x9, 0xe) 13:37:11 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x2003d, 0x0) r1 = getuid() fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r0, &(0x7f00000000c0)={0xa0, 0x19, 0x2, {0x1c, {0x94, 0x3, 0x6}, 0x10, r1, r2, 0x9, 0xff, 0x0, 0x1, 0x100000000, 0x6, 0x9, 0x81, 0x5, 0x9, 0x9, 0x3, 0x4, 0x3, 0x7}}, 0xa0) write$P9_RRENAMEAT(r0, 0x0, 0x10) [ 1475.655545] input: syz1 as /devices/virtual/input/input142 [ 1475.686736] input: syz1 as /devices/virtual/input/input143 13:37:11 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:11 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43, 0x9, 0x1, {0x1, 0x7ff, 0x100000001, 0x20, 0x380000000, 0xef, 0x2c, 0x7}}, 0x43) 13:37:11 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x400, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x2, 0x0) r1 = geteuid() stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r0, &(0x7f0000000300)={0xa0, 0x19, 0x2, {0x8, {0x98, 0x1, 0x7}, 0x80, r1, r2, 0x28000000000000, 0x5, 0xfffffffffffff819, 0x0, 0x7, 0x5d8c, 0x1, 0x7fff, 0x81, 0x400, 0x100, 0x0, 0x8, 0x1}}, 0xa0) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) ioprio_get$uid(0x3, r3) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x10) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xa) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000, 0x21) write$P9_RREAD(r4, &(0x7f0000000080)={0xa2, 0x75, 0x2, {0x97, "75f15d18bc9082cf52d52e965751a7e0d9b686c3ffef04e0930c5c5ff901ba6283abb0658dcda0007ceba4e703eb602886ddd90356f73f59bf51bb334cf6accda12cd191749f59861e7e8a1223536f6b2fce97baec48cfdae9cacb6b44dbceaa6423d1d8900bbb23006e5297c7818f9bf576af19095e28cce9f9a10d88fcc8570650013ec4c945039a19f758d05ddb1a66a16250f47241"}}, 0xa2) 13:37:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0)='/selinux/checkreqprot\x00', 0x50501, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000001200)={'broute\x00'}, &(0x7f0000001280)=0x78) r2 = getpgrp(0xffffffffffffffff) ptrace$cont(0x7, r2, 0x3f, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000180), &(0x7f0000000d00), &(0x7f0000000d40)=0x0) r5 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000d80)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000e80)=0xe8) r7 = getuid() lstat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000f80)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000001080)=0xe8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000012c0)={{0xffffffffffffffff, 0x1, 0x5, 0x1, 0xffffffffffffff7f}}) r10 = getuid() getgroups(0x9, &(0x7f00000010c0)=[0xffffffffffffffff, 0x0, 0xee01, 0xee00, 0xee01, 0x0, 0x0, 0x0, 0xee01]) r12 = getegid() getgroups(0xa, &(0x7f0000001100)=[0x0, 0xee01, 0xee00, 0xee01, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee00]) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000001140)={{}, {0x1, 0x5}, [{0x2, 0x5, r3}, {0x2, 0x1, r4}, {0x2, 0x6, r5}, {0x2, 0x1, r6}, {0x2, 0x2, r7}, {0x2, 0x1, r8}, {0x2, 0x4, r9}, {0x2, 0x0, r10}], {0x4, 0x7}, [{0x8, 0x2, r11}, {0x8, 0x2, r12}, {0x8, 0x2, r13}], {0x10, 0x1}, {0x20, 0x1}}, 0x7c, 0x3) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:11 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) [ 1475.771598] keychord: Insufficient bytes present for keycount 61 [ 1475.812918] input: syz1 as /devices/virtual/input/input144 [ 1475.872248] input: syz1 as /devices/virtual/input/input145 13:37:11 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:12 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x40) write$P9_RMKNOD(r2, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x10, 0x0, 0x4}}, 0x14) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:12 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x6e) ioctl$KDDELIO(r0, 0x4b35, 0x7) r1 = fcntl$getown(r0, 0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x79) 13:37:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000dc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000140)=ANY=[@ANYBLOB="50008000", @ANYRES16=r2, @ANYBLOB="060e27bd7000fcdbdf2507000000240009000800020005000000080001000100008008000100fdffffff0800020004000000180002000400040008000200fbffffff0800020002000000"], 0x50}, 0x1, 0x0, 0x0, 0x821b87cbe114d409}, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000d80)={0x88, @broadcast, 0x4e24, 0x1, 'lblc\x00', 0x1, 0x72, 0x7f}, 0x2c) inotify_init1(0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000100)={0x7fffffff, 0x100, 0x200, 0x970, 0x800, 0x4}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e00)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x804, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x1) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:12 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x1, 0x2, 0xaa, 0x7, r1}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) ioctl$TCFLSH(r0, 0x540b, 0x3ff) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) write$selinux_user(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='system_u:objekt_r:ssh_exec_t:s0 unconfined_u\x00'], 0x2d) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000001c0), 0x4) 13:37:12 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x801, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6000) fadvise64(r0, 0x0, 0x4, 0x7) 13:37:12 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:12 executing program 1: r0 = socket$inet(0x2, 0x1, 0x65d) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) 13:37:12 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x4, 0x4, "a214aad3e668583edc259da5eeaf9d8e540f81389b9b66257f08a0f73cd79994554928e82dd77d9faf4aac6e1bd51c8b555764815e4436fb7ef3605fef457f38", "ea82eb3db96551450924fef31a1e530fe45254f69aa19ec379e9c23cf499b19d", [0x6, 0x1f]}) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0xc0, 0x0) inotify_init1(0x80000) ftruncate(r1, 0x4) write$P9_RRENAMEAT(r1, 0x0, 0x5d) dup(r1) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x3) [ 1476.559265] input: syz1 as /devices/virtual/input/input146 13:37:12 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x200bd, 0x0) memfd_create(&(0x7f0000000000)='\x81.*trustedem1systemsystem\xae,wlan0\x00', 0x1) write$P9_RRENAMEAT(r0, 0x0, 0x0) setxattr$security_smack_transmute(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x1) 13:37:12 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x40000, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) [ 1476.661678] input: syz1 as /devices/virtual/input/input147 13:37:12 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xf) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U+', 0x8}, 0x28, 0x1) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00', {0x200, 0x7, 0x7fffffff, 0x10001}, 0x1a, [0x2, 0x12000000000000, 0x8000, 0x2, 0x1, 0x7, 0x0, 0x8000, 0x1000, 0x9, 0x20, 0x1f, 0x6e61aa46, 0x1000000000000, 0x3, 0x4, 0x1f, 0x13, 0x4, 0x1f, 0x8, 0x401, 0x53, 0x5, 0x7, 0x9, 0x9576, 0x3c, 0x5, 0x8, 0x100, 0x3ff, 0x8, 0xb716, 0x5, 0x0, 0x7, 0x3f, 0x5, 0xd36, 0x8, 0x1, 0x6ec, 0x1, 0x5, 0x2, 0xff, 0x2, 0x2, 0xfffffffffffffff8, 0x7, 0x0, 0x8, 0x401, 0x1000, 0x1, 0x7, 0x6, 0x4, 0x8, 0xdd5, 0x19, 0x5, 0x5], [0xffffffffffffff16, 0x8, 0x1, 0x7, 0xe0b, 0x2, 0x6, 0xd39a, 0xffffffffffffff5d, 0x76d, 0xd3f, 0x9, 0xd7, 0x4, 0x24914682, 0x8000, 0x7, 0x8, 0x5, 0x0, 0x8, 0x9008, 0xddf, 0x0, 0x400, 0x661, 0x2, 0xfb, 0xffff, 0x7fffffff, 0x0, 0x81, 0x40, 0x80, 0x6, 0x7fff, 0x6, 0xd3, 0x3, 0x40, 0x0, 0x0, 0xc1dd, 0x9, 0x6, 0x100000001, 0xdd1, 0xe828, 0x4302, 0x3, 0x6, 0x2, 0x1, 0x8, 0x7fff, 0x6, 0xfffffffffffffff7, 0x9, 0x8, 0xd737, 0x10000, 0x0, 0xf1, 0x40], [0x3, 0x1ff, 0x7, 0x0, 0x6, 0x7, 0xc563, 0x7f, 0x7fffffff, 0xfffffffffffffff7, 0x101, 0x14, 0x6, 0x0, 0xf45, 0x80000000, 0x1, 0x5, 0x0, 0xfffffffffffff6ba, 0x3, 0x8, 0x5, 0x1, 0x24, 0x9, 0xf9b7, 0x8, 0x0, 0x5, 0x7, 0x7, 0x1ff, 0x6, 0x8, 0x7fff, 0x200, 0x7a, 0x6, 0x4, 0x7, 0x0, 0x3, 0x447b, 0x1, 0x5aaa, 0x80, 0x7, 0x8, 0x10b, 0x8001, 0x100, 0x2, 0x1, 0x0, 0x0, 0x101, 0x0, 0x6, 0xd09, 0x3, 0x82, 0x1, 0x81], [0x0, 0x7fff, 0x5, 0x1, 0xa0, 0x8, 0x0, 0x5, 0x7, 0x7fff, 0x2, 0xde, 0x4, 0xb04f, 0x8, 0x7, 0x2, 0x20, 0x9, 0x1, 0x0, 0x3, 0x1000000, 0x1ff, 0x4, 0x2, 0x5, 0x0, 0x4, 0x0, 0x3, 0x2, 0x4bb, 0x6, 0xffffffff, 0xdd8, 0x401, 0xdc9, 0x8, 0xffff, 0x8001, 0x6, 0x5, 0x3, 0xa3, 0x200, 0x26, 0x5, 0x2, 0x6, 0x8, 0x7, 0x101, 0xe675, 0x4, 0x5, 0x81, 0x4, 0x1, 0x100000000, 0x7fffffff, 0x8, 0xff, 0x7ff]}, 0x45c) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x1c4) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x3, 0xf6, "ce87c9dee37dad06707c2c3141626cf5b9e6c7910647637542d7949572caae900081777069ae63882e7066a3d776c773a38e16ef84f8d5cee5dcae6397e28b89b201c47097c2212ac3fae1bee9720974a5b19834d7bb7ff10d6aa70ed5d472eb0931884b9f2781f6b2ad09283ba4d0d0cb776d4d057fd44712b9f7d2002fb888d27df8044a63946e9001801819c30c692023cdddfdbf9337a9830b812e8af5f3aecff5904bba440ebf629101f36c8f30e2402ea77a7e6655000e276cbdbbcd1970a4810801a829a58ae1205b56412792f541ef0bd8a9290d06478c77a1f7118b2a3c7dd781c50be6a4aad28390b3dc85cf5f0a108624"}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), 0x4) 13:37:12 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:13 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x4000, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x70, 0xfffffffffffffffd, 0x9, 0x0, 0x5, 0x0, 0x5ec, 0x4640, 0x1, 0x20, 0xc18, 0x8, 0x3ff, 0x2, 0x8, 0x2, 0x9, 0x100000001, 0x4, 0xddc0, 0x10000, 0x1, 0x0, 0x19, 0x7, 0x30000, 0xc7f, 0x9, 0x0, 0x0, 0x5, 0x80, 0x5, 0x3, 0xff, 0x0, 0x8, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x20000, 0x5000000, 0x100000001, 0x7, 0x1, 0x0, 0x2}, r2, 0x7, r0, 0x6) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:13 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2008}) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r2, 0x0, 0x10) 13:37:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) prctl$PR_GET_SECCOMP(0x15) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:13 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x2003d, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:13 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:13 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFSYNC(r1, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) 13:37:13 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x2000000000080, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0xfffffffffffffcad) fsetxattr(r0, &(0x7f0000000040)=@known='com.apple.FinderInfo\x00', &(0x7f0000000080)='trusted\x00', 0x8, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xfebc) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000240)={r1, 0x1, 0x6, @dev={[], 0x2a}}, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f00000002c0)={0x854, r2, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0xb8, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x8, 0x200, 0x101, 0x3a}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x26c, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r1}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x2c9bc000, 0xffffffffffff1555, 0x29d8}, {0x40, 0x8, 0x81, 0xfffffffffffffffa}, {0x7fffffff, 0x9, 0x1f, 0x100}, {0x3, 0x401, 0x3ff, 0x3}, {0x3, 0x6, 0xd80, 0x4}, {0x88, 0x8, 0x80, 0xfffffffffffff088}, {0x200, 0x1, 0x80000001, 0x5}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xeece}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x1, 0x100, 0x200, 0xfffffffffffffff7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r1}, {0x128, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r1}, {0x124, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x5, 0x0, 0x80, 0x8000000000000}, {0x1, 0xfffffffffffffc00, 0x0, 0x8}, {0x7, 0xf49, 0x80, 0x64e}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x8, 0x71, 0x7ff, 0x7fff}, {0x200, 0x0, 0x2, 0xc7}, {0x1f, 0x3, 0x0, 0x9}, {0x8000, 0x800, 0x2, 0x7}, {0xde, 0xffff, 0x800, 0x5b}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x1a8, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000000000000}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x400}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffbff}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0xf8, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}]}, 0x854}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) [ 1477.425129] input: syz1 as /devices/virtual/input/input148 [ 1477.490556] input: syz1 as /devices/virtual/input/input149 13:37:13 executing program 1: r0 = socket(0x15, 0xa, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="10002cbd7000ffdbdf25010000000000000008410000001000180000000269623a6c6f00000043753632f8de1217490af4e5868d7cbe1ba6a1a4b121975d099fede2e7c730c7"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20040001) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) 13:37:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2000, 0x0) syz_open_pts(r1, 0x26000) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:13 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r0, 0xc, 0x1}, 0x14) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) write$P9_RREAD(r0, &(0x7f0000000080)={0xfc, 0x75, 0x1, {0xf1, "054f446208245c271240f297c3455aef229ed50a44672dc5ba683d69f766d7b9bdd46ff4c4df0a620a5c64b06373ddf391ab67684c7d58d392fe57fdc457e9f41be6dcc0e08d0cf3a95ad59110cb383f4d2dbb56c3411ca3afedd6bc6b6537545190a01f307367838b5cac55d47bead6efdfa514a9c2f42b3a426c0926d865e3866ba13b5592e7db2a925556c666490607c0f654fd23c803a043ee34be36926381aa895978fe0d6d82fc4f2426f3069ffd63a9e686da70c5438c97e385b6e8aeb37f4e1184c7d8b770fc9aea611af857a1256217ee351a04d65d2c3b9d9afb2a6d9e466c8675ae28d406cc97c0776e38e1"}}, 0xfc) 13:37:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fchmod(r0, 0x10) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) fcntl$addseals(r1, 0x409, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) 13:37:13 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) [ 1477.690632] input: syz1 as /devices/virtual/input/input150 [ 1477.763174] input: syz1 as /devices/virtual/input/input151 13:37:14 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0)) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x416, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:14 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x10000) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x42008c) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) 13:37:14 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000ae81ac140bc5008407ed0c437a9251a2e21acbc995459fb8e6dc0ff51f75b1e8e20ba306f53382a7577ecb8f4305ed80c6749e93cbad498be215ef7", @ANYRES16=r1, @ANYBLOB="000a28bd7000fcdbdf25060000002800020008000200ff03000008000200490c000008000200010000000400040004000400040004005800010038000400200001000a004e2200000eadfe80000000000000000000000000000effff00001400020002004e200001000000000000000000000c0002000800010010000000100001007564703a73797a3000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl(r0, 0x1f, &(0x7f0000000240)="301d7a735c8b40f165001dee3aee7903ab89a2dc8a007d") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x2, 0x0, 0xaf45, 0x97, 0x3f, 0xa437}) 13:37:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) get_thread_area(&(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x400, 0x4, 0x4, 0xf6, 0xd56, 0x3, 0x8, 0x1}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:14 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:14 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x2003a, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:14 executing program 5: r0 = dup(0xffffffffffffff9c) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x1, {{0x2, 0x4e20, @broadcast}}, 0x0, 0x3, [{{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @remote}}]}, 0x210) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) 13:37:14 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/l2cap\x00') pause() ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000001380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001340)={&(0x7f0000000280)={0x1094, 0xf, 0xa, 0xb08, 0x70bd2b, 0x25dfdbff, {0xd, 0x0, 0x5}, [@generic="3ccc42cb89e1542c0a9c400a1de06cefef0f510b059da62f5061547a23c9b6db17476423bd33b42ccabdd7e62f7d8de822143a6edb1ef84138f5", @generic="df890b2bdca6f29c0c3f257dc3cf5c3520f2a63fd398f354dde6149a32fd15818068d1468a7af46ce933eb916505dfda2abb8339a46c2b2cce03e644f4ff3b57d708ebc2871cc303e008d89deaf777ef70882292fd9c27ece00f24002aadfc67a335b6327b9af165cc08740e55c8dde8964f82c466578edeb8a6ca27afd4f42b68f1483ec2f4114aca7539fabd3bf87469f985916e49a414f3a60f785e01d1d0134a230fac7fca43fbea77c321c5625da54ccccafdbe589115d85349b718a5d72dae610108836a37e03fc792816061bdab046d19ebe168f876186d9e878a92e3db66c23b23778f6dfc54b92fcab001419c56151eca56416e67fa53405334aea2e6c3cf0ca2c9e2aff24f16bbab5152cf2b458a281a17956ca0b8c8c8594dd0d980b887946ff0d4981380d01b03a1bc7b694f784a51c6e83f76d24eadd12256e71aa98b48714d91465befafa2de495937e645c9eb137e77e19100c2080d3d2fa264e775da872dfbfff848580e3ce5829526c593aee274e62f9a1d65cdb0b19b1f3039f75acdab5e337a2caea767c227f692907a28d60760512c3060a055459620ff2bbfb9b0b6545731681f2b2cf204891bef43eeb3effb2e9a14c33bae26b9214ae9c33c5aa099398aa7476f4b7bf8db732c4322c8a6dac8964d24cc492dcf3d838c3dc355874b21723de262c0324625a508ffbe717c66b13dc1ddbcbc998843673b8ab508ae6050519a3dbd0d8b2d95718f16105651f3014f7267dee63ad8a73e6682576be5a076c1ccc26508646bb04670a797e67af5723e43d1326f7dc586324566bfae75841cf4a29d0b85b851d47503cc9f83df28b03e9d28a56a6d8338c1f171a591061b8321b77e85d8697350940b2648737b81d8e60ce38b0b516702fdf70b1e28d6e1d06286aecad28f8bc6dbb4729cc6f9d82c366071a2a7a31afefe7e5301449a0a415904ce4a98cc3406a922bebc56d7a2356655694ad82959a7bfd121bf89a554c7360e2218048c0e5070cdae2a94e87e52e055cef6433fa660cdbc6a0617daf0a53ecf48e20742a23836091dab0dfa9b3fc782b640639202596fc817ab3d3cbf619bb585fe821ff62d8f34068774613f7529a4e3f5d6b2625a43d3901e94c189d4401705e93e47f783abac806d38d3de168e2f6b49f09b47471708abcb0e75e8f2c6f7739be371bf61dc47633115efe3ec1647e2f040335a3897440f6e69658f1bff5559d3f7bd3caf7e4c198bbc2773bb3bea7fd8d3a843f4091ca0963847139558b728e62dc8cdd15175415de4111657a2b03380ec2976a67067fde4ea583f341ce60350eb00da0043c7696780bb7b9b411b0ddb88c76e99ee1efd46e951d79a7ebf63a5305abe806d538003346fd4efe59cdcd3c9a0ac3f8968277bd6f21cf87e8efd36b96a3639f147e4410d782b1dd59e709d289e63a164f5c3cd616251cca7e7ade332671c1d49b3b6cb9b396a5a755ef134253b404017537160280d9bca1c71142f70cf8ed68686f659c56f8a1f2265e34f160e857b10e96fd6f484f4505471912b7c37c0ec4f16c71d48752725b3a4b430346bb4279d67fc6cdf754035875305f07b6dc8ccc8ad5566c05d66df8e67343f0ecf647a1500a384715d9d3587fe4f883c3f598a64b0b386102eb952d92ae99764f24f0016b835f0d2692d0afa3fbcb8383efdeba93c0780c312087ed1448b6dbd6f399cf1b46dfb6e9c3f9d53c0a1e545fb1803a5156670c16b29bda7614a6ff7975dbb777971a9da154036759466ae62546788f4fc05ee75af1f5259f031a4d9d36934b7454928db17b98421a4e8086a5da50cc323b219a50397b7221132860c8c0fdbef6a733f70ef00a1689876f5c0348bb10ec57e0549a75f7b20ea68586f172f5b92f18c0d33b614c8ee6a48eb91b847bc852d947dd090c3bcd20bb1f5be7f9130b567c2045908d7c2db38a2364f2b99445ba3ef70ce1fea69d96a48dca3dec80ca059cce9274931a7f69350738706531026966edb584f742c64f248402484867093107cc1fcf920804a4cc5cc0923532c477ae94adfb6554352dc30fcec93779430b9aa70e5532e08d42a18822afa1eb7e80b402922e1577a87d398758e89f0212045ab9fb7d5008274d0477737c568af31b9d656bbf06de2e7a91553d8d8fad7eff1e0ef47b5e33b395c411da4b4d3adfb21acc9e457b3fba02f7f70d0d9f7932bc06a9b6a7c9e157786b662e1ca0c7c2e706da8af45dee63d446b40956d74151a364155f7659fde0a1d2121c3a55021a2763299865ed3ea665f087089f55aacb249fbf6df215d6ba480eee45cdb9ddae46b325d3ec3624c21cc6cc871906cb198cc04177e69e907dbee9ab8ab31b44e9296b39158b168540cdae267810c8263f9966c63604da0c99df51ec577e571d6865a2dc436231fd424fe7cfa38be4bf19344e7c8c020ebdc9757cdab6ab55f4041851f6ace4c32bc6f086a27528f7434b88b8fb286bf16df79d75bd5b5e71354d2d3cbbccd7127d9ac5d67ab6a86c57f6766a9a9bfe9fb6722a3624d92d5c4a314f671a4025034b580c5c9fe8cde50c462681c1a6523f407bb4214c46ce8dd9ca992312b06943a4676c2f5aefa3e8684f6a01948bdef7b547aa4f3ce94fdf568121f24b70417b8f8cf3cc1faf42cda0866eb9f0eb13fe2f58e4f6773cd2e021ecf6462a0f976d97f7cd706fa706cb68c4457aba34d3f64cae598c12dfcfd417a7716d24ebedde50af243460ad0db8c47401ea4e6476d7a57be54c57420c9c807918e143cf3230a72d44eeadd440915263d485f86cc0de6fa0cc734cb25d202a69582b5b5e7ab89c547df34708a32c1ff990d6f47b4fff32850bf7bf12da69f9bca2667e801faec7bd2c217805a3c58a6644e95c8b5eef27126722a71cfbdb20df951b1895f142c4d4453a04fe10a69f45cbe6756f7305808e09948f4f9ab9538cfa2923ffcbd9e7cda54b7a24e5c0afde15531e9000717ae16be3a2d7363eeb73dccf6d5392ad263fd8ff7cba68fd4e559f30f6c6ce752f155105966aec7d9d62913b58365643b83240ec0374cc4c22dde39ffcd1d988c50063339e7c57de9e5fdb2ff5ae82c25a10f51d8579b71125cb0b96bcab45ebcf027136409af20fd2ebe73b82a451a58e0b6c7c44f697a757a508d84f35d508eaef3c33247b8e2e3f99270a69d4a2e5a08c6798fa65b91839b739a99331fd1b365b3e198e0a13f8154964c9ec8f91c53ff033326fdfeaf0a9932368ac736a1c38971f1878f65cb12df019112ccebd4c2176fa26c622f1aaf4551e01a72a94bf0c4a511ff0a05404aaa7a7c2935a32aedc8104ac09b836ddf4ec35f5419ff139d1853362a6c8a61b1ddd0ad11fe5a27e1c40c7e6aa4b339e2561ee776b5be3492f50660dd8aa06b32e8dbcb9811bda09cd3b61e0fe644fe8c3c3f462d1ba7596bf6c539d32c2029616cbf0f65066257de0312fbe134264b02df8617fabd4a64809f45021f6d5491d9257bd5706fe16c578b2ce90d58368a29641a5d81696a2710e7301e3a927e6c9844dfb32e7e6a37d00a85fabda3b36f6e28513e14f3dcaff940a088a78ca39d0bfbb145e8581105dba5a8f9eb68bc2d86c2723a33e63673741254c9a746c6c6b79c2746727dea401498d75bcecc997bf250286018dfdad2cecedea36e923432c144c80796021e331037a3d981893dc740e3b8e9c3dd3596533d878b3ced412209a9752b485614eb8e6fda6bb684a8e208152b6675c7ec4d99073636ef3a626646dca7d070d6caeb81d648a7afbe940a608fa742228f4216a87d6cff130891da375cded1862ad946d5464b7ddb21892b2642c1f0f8660e7906f5c14d295597140240ac7cec33e81cc77e2f3dcec6fd297632188a41dd57345eac9b8650bc2010605277d0e1e6cda6ab34f6f05686574199777edf804b16f687d73dbfe282219d556cda5199fc1f0251089279e042fdb6f9bcb41c0f9db7cdf503b90c029b89b95c44352a6578018e542bda191811c13b410829ab3ad0ce79ee085b0aa387ae7c7584c1cefe630d35da95486e4ac923b8cd34df623ab5d3d198c3193bb923c8be1bd63057b2bcfa89965670ae893a9c4cbc3ce0fff27ef7d874ff6061fb1b50bbc10aa73e33619baf6408a9a3991f5411ac98bdc1421921baaf26e747b1b4ffdeb5da0bd077c5ba2fdeb9c72c9a96767029fbbb33eb853d765e297c76ea66833a08f7f0d2ef538eef3d12732bf1dc8f796a21272232aa687a11cede0cc76e32301251feb09cff7df40715cbab6c95bbac4c9f99a4ec8940399c706ec91d76b0b8ad5987e4e5e2a2f5f99ad21ff308ce237cdb83d50ee361a0a2970bb2e734d3d7db7591258cf10a0f5922ecc7643925b21d77a2b694d0a01176844914ac977d598021bb5729a4079f84740219ae57f61da4c6c3d5c1db1207767b1deffbed662fb37f79c8ba4bbaaf7640bd05a475514f808e11633de8306f9bea1f18f44f0154e8e382537dddbe0c704c5b2f2d9496420be96bc01d0d346a7d42ac1735cd521656749f53c3604c32f2520069d1ef7b3fc26dc4cfaead5b0d6d65450319dbb97f1a9e260489ff70cce6389532fa93488c50335e669adca027f7744963655343d55512f298f8fc95ea5159758ecb5c7992bfb9942040de1526717414deb3fd70f3082a711fcfc5cf1680e8ee49eba6a2d7fb6f49804af45ca9ebbbe7fc758a1dd16428586f09f700281ed1d4d979e45e4a0af300d302e42568bbf5a83d83854985059448849d61764b466c749f9b03d817d1ff003ca3409b8f76c133e49bcff44c897f175cd1e1dd630f08f5fd32f9a360ec689c89657219b0b3304cc0a02d2fae94b6b976dc3e77849a7603382ab58a435c128ebd234b57ad14cb56ffb7db110bc7ccb869232b420effc6b0f6e15986204a35d7d9099732e4f50c8eb98d99ad9715f2c5768ca936f163de14ce3db62875bbfa9e198281d7e5cc4799904e4b4e0a96f87291c8358b0430a117e283ba64f06d13d434b119b7441039a12742ca3a2e6ccb8a0ce5fa0ef3df39a0ae752a6d99eec45e5ca50c3c2d40fc5ed8af6ee1aaceeb4139d4d8e499bb5fe6d8d9040488f28b4a8a1a717211f7fddd9c48ab14709c08a49cd280d92d7e87a014d23f3195259e39340ede9b13bcb43691164bbb867058e3e61f4635952a49e127ed6af370280c54263f32817ffa1abbdc3206d07fd57d8d297b6f8172d2a0f7b1f9c6df4c26376c4d477c4fed08e38aafcfa80f0a64176ab8612beadb2116e40456aef8b5d28aa279453632b9891db5abe44889399fc4fd9125c447a925b311322fdee92e252656025ebc18d2db83f7081d3f0a11583e4d1bf7408d48312877c725e48e5af301b88f9efca00947dcb94db0d6d0ba640d669795fe4baa9711a27216be09fc9c309b39b940077b59243cba8a2eaa883815c8e75c16d92266d52f596bf8fa31de2d51dc167500db0e05c34c2c1cda599ae4244287af5bc36b6d8ba9f8c13dd4293028e47ae8a64aa19266541142323abf96be08faddf41bfcaafe2138b822b7f5bad92eda7bef2150114556b20a3b5799807c5d1e3f5ba051cff434c19050da72d5518f0da0d83d687add7b36424ce4e16ebb0aafbdc7965a7c8325b3a7bfe00964540df8fdba619d55fb80d44bfa8235eae7735b229a42c17f1be8a588a875a13c4e62043f74fad97173b25f5e8d7de4df9d3241d640b248dfbb21bea7826723e7fb70674eeea21488272ea336f05527ac6bdcbae10aa0cff8d39aa636f61bf03b", @typed={0x8, 0x65, @ipv4=@dev={0xac, 0x14, 0x14, 0x1a}}, @generic="e2f0316b5a6df37a71b2a36582d72e4b6934fba56aff667da5ba02902950be1911a27a307c26e8", @typed={0x14, 0x1a, @ipv6=@mcast2}]}, 0x1094}, 0x1, 0x0, 0x0, 0x20000000}, 0x4015) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000040)) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00', 0x1) [ 1478.281350] input: syz1 as /devices/virtual/input/input152 [ 1478.343176] input: syz1 as /devices/virtual/input/input153 13:37:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xf, &(0x7f0000000d00)="9d4e79f94a47c623d4c63e44903bff50e61dd4a8127a6327fec45188901157d40150f4041bb769ac3551d31663f8f1dd8ca00ac2d17b44bb4c0fb7db6e0114f28d8a932cd6c13fff4f2d23d9ad97c360ccd127fa9f1cf9ad9c82c1c3f5834597b833e799f4667ad119e8795fcb7ce827559fad2c4774992cd89ab1f6da7a075abac693778aa2cfec494eaaa8ac012072685297efe4910eb15c34fce9ae6d3547051d2faafef2d753c645ed2c1af0ae4d00ebb6bbfcb07b8b8836153711f9602fc3cf4f88ed0c468a", 0xc8) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:14 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x4080, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3ffffffc, 0x20) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$VT_DISALLOCATE(r0, 0x5608) 13:37:14 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x540, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) [ 1478.465193] input: syz1 as /devices/virtual/input/input154 [ 1478.519695] input: syz1 as /devices/virtual/input/input155 13:37:14 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:15 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200000, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8000000000000020, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:15 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x3ffffc, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1100080}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x500, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x2a, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x40) write$P9_RRENAMEAT(r0, 0x0, 0x0) 13:37:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) 13:37:15 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:15 executing program 5: lremovexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="62747266732e706f6369615f61636c5f61636365737300702fbe0ed2f63290fe053661801bad98d02d30ec26cf914fe96586cc57fd5c3a29f2f1c85f961b9a5499726a0d172ecb59af8488192ddd35f184252348af265871383cfda384e0e3dd10123517dbf51e3916f4ec4c86bb3b51dcfb0d03"]) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) getdents64(r0, &(0x7f0000000280)=""/177, 0xb1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="e8649140e22fb1d1ca81a564dba25a62bbb62d9debb35ac859172c6e09ba802e6d148fa4376fecef579f155466d7ada55784c27511b513eb3f4041f531980917d6fbb9954bd1c9f78ccb4579302be9f8c6eebd8c34055b31678e88ec1768a134c3a82ad3056bf994a4f284200ea96d17b67302ff7911f616617bfa981c8b6bf5a918b746f8d2e0cc67c8530332a2bf50956eee1e3a893f7349cc9159e6c912352e93f1f47f58842fe0a261fe", 0xac, r0}, 0x68) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000140)={0x1000, 0x8}) close(r0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000001c0)={0x4, 0xfffffffffffffffb, 0x100, 0x80, 0x764a, 0x7}) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:15 executing program 5: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200180}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x4000084) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r2, 0x0, 0x10) 13:37:15 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) clock_settime(0x6, &(0x7f0000000000)) [ 1479.189517] input: syz1 as /devices/virtual/input/input156 13:37:15 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$RTC_WIE_OFF(r0, 0x7010) 13:37:15 executing program 5: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:15 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x10) [ 1479.245020] input: syz1 as /devices/virtual/input/input157 13:37:15 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) 13:37:15 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:15 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x800, 0x0) 13:37:15 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x3c) 13:37:15 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040)="c94b64d660e5e0b4661d605e703741cfd6ebd903de22cdc92f46ec81530bfaee92fdb1c2aa89c36a851300151362374b440a223992964eeb5d98df8cecfbbc736dc371bdf4b7542897aa03e22522089cb5873697b51ff13ab3ede695446190dc13f8ebb891836796f78dedab32", &(0x7f00000000c0)=""/53}, 0x18) 13:37:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x4, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:15 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:15 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="2d2f39ed4a73532e92e5aa7e7de8eac7bc228f8a1127a6dca2945c7d5b4eee75077ef32e65c9d285b2479ad0236d783eabb3b4512ce4ae91c44896d28f8ac9ceb2e67f8d9f5d9c52290fb9f98c7ddc9becc3e0c925b012ec9a94be85a4b7e3307096dfedcd0d34767108f5c858fa0f", 0x6f, 0xfffffffffffffffd) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f00000001c0)=@sha1={0x1, "8cf77c2ccde1c78b623314f692e2e05d15b2abc1"}, 0x15, 0x2) 13:37:15 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x100, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) dup3(r1, r2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 13:37:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:16 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x8200, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) write$P9_RFLUSH(r0, &(0x7f0000000000)={0xfffffffffffffeb5, 0x6d, 0x1}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x32) write$P9_RXATTRWALK(r0, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x9}, 0xf) write$P9_RLERROR(r0, &(0x7f0000000040)={0xa, 0x7, 0x1, {0x1, '.'}}, 0xa) 13:37:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") perf_event_open$cgroup(&(0x7f0000000340)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@loopback, @loopback, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@mpls_getroute={0x8c, 0x1a, 0x101, 0x70bd27, 0x25dfdbff, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x3, 0xff, 0xa071170a986c5ca3, 0x600}, [@RTA_DST={0x18, 0x1, [{0x4, 0x10001, 0xabf, 0x1}, {0x10000, 0x9, 0x524, 0x5}, {0x7, 0x9, 0x60f15eb, 0x10001}, {0xff11f0a, 0x5, 0xffff, 0x81}, {0x3a, 0x773, 0x10001, 0x8000}]}, @RTA_DST={0x10, 0x1, [{0x7fffffff, 0x671c8b0a, 0x6, 0x4}, {0x40, 0x4, 0x1f, 0x2}, {0x5, 0x118, 0x2, 0x7}]}, @RTA_DST={0x18, 0x1, [{0x3, 0xfffffffffffffffe, 0x21c, 0x3}, {0xfa, 0x3b, 0x3, 0x14000000000000}, {0x2c27, 0x7bb0, 0x5f0, 0x1}, {0x8, 0x8, 0x8, 0xff22}, {0x3, 0x100000000, 0x1, 0x6}]}, @RTA_DST={0x20, 0x1, [{0x1000, 0x7, 0x3, 0x2}, {0x3, 0x0, 0x3ff, 0x8}, {0x400, 0x1, 0x8, 0x200}, {0x4, 0x5, 0x4}, {0xf7, 0x4, 0xffffffffffffff47, 0x200}, {0x5, 0x0, 0x6, 0x7}, {0x26, 0x6, 0x3ff, 0xcb}]}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x1}, @RTA_OIF={0x8, 0x4, r2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x800) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x24, 0x2, 0x400, "a84ea07cf73031d9dca08d0d94240302", "d97d1e81f16dd99f7a19d558b0db45"}, 0x24, 0x2) 13:37:16 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18008020}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x500, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x52c78570}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040001}, 0x40) [ 1480.207949] input: syz1 as /devices/virtual/input/input160 [ 1480.262732] input: syz1 as /devices/virtual/input/input161 13:37:16 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:16 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000140)={{0x5c39f720d0f5d1a2, 0x0, 0x64, 0x3, 0x7}, 0x6, 0x8, 'id0\x00', 'timer1\x00', 0x0, 0x82, 0x6, 0x400000000, 0x3a4d}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:16 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0xffffffffffffff99) 13:37:16 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x1000005, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:16 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 13:37:16 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) pwrite64(r0, &(0x7f00000001c0)="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", 0xfd, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@v1={0x2, "e0cdffaa9b314b413f00ff10ec8e916c"}, 0x11, 0x2) 13:37:16 executing program 1: sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x15, 0xa5f, 0x6}, {{}, 0x1f, 0x81, 0x3}, {{0x77359400}, 0x17, 0xf2f7, 0x1ff}, {{}, 0x17, 0x1, 0x27}], 0x60) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) 13:37:16 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000080)="4d8e9d1a1d77bb6fbd08421f23258fe5b5d595ea5d081deaf932acdb8a4b33ac614cb7f2ea6004805c4ee92016d18dee8ad96d26bd9621c82e5ce8d1ed6b0ac5f9622020ffcca9e6d1ad1fbc9202441d0a10587e6194968a57f7e076bc7dc2245b25f2ed945d55d78a0056215f5b3028fcbe867f3cb5e314e7b33bf546dbd21862f3f0434c75428d4a5f40eaa31f8c1634f6da763570ae4b72c83c547c1cd93ccb0f5e25ba546df2229cb80c426fc3c3e2797094869eb14526a32c78effe77da12a7cab47950b0112df4aa4096a00c5c868444a95fb25cc4815b71eaecbb0d56346301dba5ddcbb81664d13ce818f78dbde7a97b", 0xf4}, {&(0x7f00000001c0)="80504fc63a36bc3801b30ffa96d5e857487a73198bee38a6048433c24364f15de5594feef56fd2a77869a66d5dff6053ab192dd76165c7883a68b421ae75969b82ec16db0c85ce6432d06c8328959e700fe65d78761b61e617b98877babc6847a4bc9a85acd23df8ae67d78c661a4b4ffc8606f8d48f5aa6640b71d8b790", 0x7e}, {&(0x7f0000000240)="ea23a4ddca8c7298a2ad4528850ebbe9610a1ab2ba7cb8e42e4f2fc50fc673dfb035108cff577f4fa25d4be3c61fbe0696c6c0c169f79bb057b6df7a3914eb5131eb203b1ec64f39b42d85bb9a13b904f5c1f6a52138a2a52f4eec827696c6633cc152dbdb50de9a6237284840548dbbfe", 0x71}, {&(0x7f00000002c0)="cc1acf77418f812f761ddb2365e3791a8a433c270892c7767b6f8ab0cc918ec73947a9c6931f63563163fc3e10261dd1ba8ed3e4a2956d979f949fecabf1144b54743483c292dc7a0cbbd4afdbeacd504555b256699a39486292180ce63f8a2c59200b8d77e715d9b58b157123d7f3cc13225533a556a3953277d805acffbaa8d26222ad84fdc2ea6e3735482f32e2821fc30707b0c363c31894f84cbfd444baaf587afd710fd303bea6d6e94549dc071dc442b2464e6f2e91b8ac448d", 0xbd}, {&(0x7f0000000380)="8f4375895ffadbac775daa16fe773d7d3e2b1bf6d549a474d88eeb7652870c7f964fef4bf83aacc2717d27a0b731b73c81f45005981f9238f7b82411c27cacf5fa676712903cae5db8eea000833a987cd9a6569a87a0b43c84e30ffebf1ef0bc894e071fa178264e152cb5b053f80a7ec5b022bb6d5dd4dda7e1752933ba67b472c6ea5a68e63ecc4afc5820481ddb010661ca69e6c46d8258d873ea14ad26b5683ce2", 0xa3}, {&(0x7f0000000440)="16fd37e113695bad79c1e89122be9d727eebc1", 0x13}, {&(0x7f0000000480)="e53c62e204ba27da66689a08868f5d31549bf5297b79da8c53f15bc24ac2e34e760693474aa7fd6fbcd271d959b316e4639ae0ca89148a4a69f43868a22eb5bd47bdc0f86903dbfb3bbe082b97d85d69df137dc4e087f2dd61ec60f6f8c759301cf64bcdd7e4902767ae0035ecc9ffd699f765d70c09e792f93e6331d12c6689abd1e371b939d87f54c7e4a1ff6a98", 0x8f}, {&(0x7f0000000540)}, {&(0x7f0000000580)="79b60970dc1f747d77f537c644fc01737556ad51671aed506f3541e9e0590e83d988bb4c2734c061ce31aa72499e2cb66855510a5adf4a746d44b2eb8595420550614c91912e7e21d7b7566448", 0x4d}, {&(0x7f0000000600)="d6d80cf868f4e39f34fbd9ce8dc8b1f9a464ea02058a916dc291df", 0x1b}], 0xa, 0x0, 0x0, 0x20008810}, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) [ 1480.934593] input: syz1 as /devices/virtual/input/input162 [ 1480.963243] input: syz1 as /devices/virtual/input/input163 13:37:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x400000003, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110, 0xfedf}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000e00)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0xe0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0xc00, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000240)={0x7, 0x9, 0x2, 0x80000001, 0x1, 0x3ff}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000d00)={{{@in=@broadcast, @in=@remote}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xe2001, 0x140) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000001c0)=""/4096) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) write$P9_RRENAMEAT(r1, 0x0, 0x10) 13:37:17 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000000)=@sha1={0x1, "ce1a1ab28467f686b91991719885636b9d5dbf32"}, 0xfdc2, 0x1) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000023ac4a6800000000000000000000000000000000000000000000000000000000001b000100ff010000000000800400000001000000e10d30e586540339afa2b7c0b8561a22d08d91f3e02a3391c568ce635fe363518846c9a98d3faf18aff5e942a93359de8b9f65ffa261a538fc278cbe9fac58733a23444cbd32a763f3b9d350a3dcb12bbbc515f0490000e876aef60f0528e2446abb4a20292e241cc5dda19dcbacf8a3bd6ce8279d129ff84866f5b4660b6042e8e215751743fb358aae9d0b473f8cb174848ba7eb0000000000000000000000000000"], 0x133) epoll_pwait(r1, &(0x7f0000000240)=[{}], 0x1, 0x2, &(0x7f0000000280)={0x837}, 0x8) write$P9_RRENAMEAT(r1, 0x0, 0x10) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000000140)=""/58, &(0x7f00000001c0)=0x3a) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000200)={0x6, 0x10, 0x1, r1}) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x63) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) [ 1481.087701] keychord: invalid keycode count 0 [ 1481.093993] keychord: invalid keycode count 0 [ 1481.123518] keychord: Insufficient bytes present for keycount 301 [ 1481.132735] keychord: Insufficient bytes present for keycount 301 13:37:17 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:17 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) r0 = add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) fchdir(r0) 13:37:17 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x40000, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @multicast1}, &(0x7f0000000040)=0xc) write$P9_RRENAMEAT(r0, 0x0, 0x10) r1 = geteuid() r2 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="a469ccc0bdd17b822027a8f6bf42113812cb661e498b93b6f79ea496102a4ed51dd7b69fca1c654190022c05d7b991f91d5e51d2532f9f0fd176e69da3511a98c9a0a86c907f000b57e89653f839d576bcd02242662859e1590b863c26f3c580a19f56d4c74948b8ab2e65e3755188d836a705b866c80bac341d90ce381e97cd89b2c308e79279febaee68eddca5e22e68438d9249b7c3f46f990ed0e99057886ebf0f93f2166cb6f4c026a079aab7070dc7633bcc47718f85af2d65b84ed1467d506e27b3275f49699d121c62bcf68b0da3", 0xd2, 0xfffffffffffffffa) getgroups(0x3, &(0x7f0000000580)=[0x0, 0xee01, 0x0]) keyctl$chown(0x4, r2, r1, r3) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) write$P9_RSTATu(r0, &(0x7f0000000280)={0x75, 0x7d, 0x1, {{0x0, 0x60, 0x9, 0x80, {0x44, 0x2, 0x6}, 0x1000000, 0x1, 0x9, 0x9, 0xe, '/dev/keychord\x00', 0x10, '-\\nodev\'GPL\':\x9c\\\xe8', 0x1, '!', 0xe, '/dev/keychord\x00'}, 0x0, '', r1, r4, r5}}, 0x75) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) setxattr$security_smack_entry(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.SMACK64IPIN\x00', &(0x7f00000003c0)='\x03\r(\x00', 0x4, 0x2) write$P9_RLERRORu(r0, &(0x7f0000000300)={0x1d, 0x7, 0x2, {{0x10, '-\\nodev\'GPL\':\x9c\\\xe8'}, 0x100000000}}, 0x1d) 13:37:17 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x400000, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x1) 13:37:17 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 13:37:17 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:17 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) lseek(r0, 0x0, 0x5) 13:37:17 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) write$9p(r0, &(0x7f0000000000)="2ff418a30bc4e434f4159b5a890e70760e8360651f9cc4196576dfa6699361596cbeb0c3afb5cba390d0303bb5eaa5fc9f89c5091566ba842303f9c066ae292aaa470293591e3b0463cc3c54b14455d8664c8ac124441e940f1395e429d32ef02ca56f5e3ba9403c194a0f821124af1199dc97f13aaa269dd8d2e2f39ca5e534378f5f8f754b70472dd902293c900c333192c1f4caff066affe4c2afc757cec301232d60ee175ddf287578593a55522da73879", 0xb3) 13:37:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup2(r0, r0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x4, 0x6) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r3, 0x0, 0x10) r4 = getpid() fcntl$setown(r2, 0x8, r4) [ 1481.814794] input: syz0 as /devices/virtual/input/input166 13:37:17 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0xfff, 0x8, 0x8, 0x0, 0x0, [{r0, 0x0, 0x2212f103}, {r0, 0x0, 0x2}, {r0, 0x0, 0xfffffffffffffff7}, {r0, 0x0, 0x100000000}, {r0, 0x0, 0x7}, {r0, 0x0, 0xdf17}, {r0, 0x0, 0x8001}, {r0, 0x0, 0xd73}]}) 13:37:17 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x1, 0x0, 0x200}) [ 1481.875934] input: syz0 as /devices/virtual/input/input167 [ 1481.888204] keychord: Insufficient bytes present for keycount 173 [ 1481.895668] keychord: Insufficient bytes present for keycount 173 13:37:18 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) io_setup(0xffffffff, &(0x7f0000000000)=0x0) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, r0, &(0x7f0000000040)="31c9b16165f23c60eec75b2383b1808f6a7188b42edb3759340f24a62e4aa19ecbc2e3ad09711a06ac65fd8808c5219db7d6d16bfdce258f9bf9360f85b2589e289a2171d3863dd0bd345980f7dce46774c4a226db16709628ea580877702b0281026d1cccd2dbe179283eec18b4be5903359378a3872acb966b87cf29ad650c1b91216354ff2717f2e08fb7b4b3f0bfc011e683b8111d8901106811273beac1fa47250e49227f09ee1c650e41cf7ee6c23d621844ecf819", 0xb8, 0x3, 0x0, 0x3}, &(0x7f0000000140)) 13:37:18 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000100)=@alg, &(0x7f0000000000)=0x80) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000f00)={&(0x7f0000000e00), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x68, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000dc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20040004}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2008d9b160f92b57a1250f00f7ff0800060408000000080004004cf0ffff"], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40001) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:18 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x20000000008, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) 13:37:18 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) fallocate(r0, 0x12, 0x1, 0x49) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x258, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@arp={@remote, @local, 0x0, 0xffffffff, @empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}, @mac, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}, 0x1, 0x40, 0x6, 0x3, 0x7fff, 0x800, 'ip_vti0\x00', 'hwsim0\x00', {0xff}, {}, 0x0, 0x302}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x258}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x25}, 0xff0000ff, 0xffffffff, @empty, {[0x0, 0x0, 0xff, 0xff, 0x74e21e606272ecf6]}, @empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x7, 0x9, 0x3ff, 0x800, 0x100000000, 0x5, 'bcsh0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x154}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x18}, @multicast2, 0x9}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x45, @broadcast, 0x8, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:18 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 13:37:18 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0xffffffffffffff45) 13:37:18 executing program 5: socket$inet6(0xa, 0xa, 0x4) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:18 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_ROPEN(r0, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x19, 0x0, 0x1}, 0x2a}}, 0x18) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x180, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'memory'}, {0x2d, 'pids'}]}, 0xe) write$P9_RRENAMEAT(r0, 0x0, 0xaa) [ 1482.672593] input: syz1 as /devices/virtual/input/input168 [ 1482.732987] input: syz1 as /devices/virtual/input/input169 13:37:18 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'gre0\x00', 0x0}) recvfrom$packet(r1, &(0x7f00000002c0)=""/180, 0xb4, 0x40000000, &(0x7f00000004c0)={0x11, 0x11, r2, 0x1, 0x3, 0x6, @broadcast}, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80, 0x0) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r3, 0x0, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000409}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x187, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1ff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40010) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e21, 0x100000000, @remote, 0x6}, {0xa, 0x4e24, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}, 0x0, [0x0, 0x382, 0xaf5a, 0x4a3, 0x9, 0xfff, 0x3, 0x8001]}, 0x5c) 13:37:18 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '/dev/keychord\x00'}, 0x13) 13:37:18 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) write$P9_RRENAMEAT(r0, 0x0, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, r0, 0x0, 0xe, &(0x7f0000000140)='/dev/keychord\x00'}, 0x30) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x101, 0x80, 0x7, 0x2, 0x0, 0x0, 0x8a2d4, 0xb, 0x7ff, 0x0, 0x4f63e471, 0x100000000, 0x101, 0x3, 0x8, 0x1ff, 0x2b69, 0x9ad, 0x9, 0x7, 0x0, 0x0, 0x9, 0xffffffff, 0x3, 0x271, 0x3000, 0x7, 0x2, 0x6, 0x9, 0x0, 0x3, 0x7fff, 0x3, 0x4, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000080), 0x9}, 0x11301, 0x1, 0x7, 0x5d2b324d27778b86, 0x4, 0x2, 0x7fffffff}, r1, 0x4, r0, 0xa) 13:37:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'veth1_to_team\x00', 0x2}, 0x18) [ 1482.902958] input: syz1 as /devices/virtual/input/input170 [ 1482.961576] input: syz1 as /devices/virtual/input/input171 13:37:19 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:19 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43, 0x9, 0x2, {0xdef1, 0x3, 0x8, 0x4, 0x4b, 0x1, 0xfff, 0xfff, 0x9}}, 0x43) 13:37:19 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:19 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2083d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x5385d37abe5d8229) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/100, &(0x7f0000000080)=0x64) 13:37:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x1, 0x5, {0x56, 0x1, 0x100000001, {0x20, 0xffff}, {0x6, 0x5}, @period={0x5f, 0x80000001, 0x20, 0x0, 0x3800000000, {0x8, 0xffffffffffffff49, 0xff, 0xfff}, 0x2, &(0x7f0000000000)=[0x7ff, 0x6]}}, {0x51, 0x1, 0xfffffffffffffffb, {0x400, 0xfffffffffffffff9}, {0xf486, 0x9}, @period={0x5c, 0x1, 0x1, 0x0, 0x7, {0x5, 0x4, 0x9, 0x2}, 0x7, &(0x7f0000000080)=[0x8, 0x0, 0x100, 0x400, 0x20000, 0x0, 0x6]}}}) 13:37:19 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}) 13:37:19 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:19 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) unshare(0x20600) r1 = inotify_init() preadv(r1, 0x0, 0x0, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) write$selinux_access(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6574635f72756e74696d655f743a7330202f7362696e2f646863b46c68656e74203030303030301e7e69e430303030303030303037"], 0x47) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1000) openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) [ 1483.632648] input: syz1 as /devices/virtual/input/input172 [ 1483.671168] keychord: Insufficient bytes present for keycount 65 [ 1483.690738] input: syz1 as /devices/virtual/input/input173 13:37:19 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) 13:37:19 executing program 5: 13:37:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r1 = dup(r0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) 13:37:19 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x1}, 0x28, 0x2) [ 1483.836377] input: syz1 as /devices/virtual/input/input174 [ 1483.849171] input: syz1 as /devices/virtual/input/input175 13:37:20 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:20 executing program 5: 13:37:20 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x54500, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:20 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x4000002003c, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x800, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000d00)=""/172, 0xac}], 0x1) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:20 executing program 5: [ 1484.416533] input: syz1 as /devices/virtual/input/input176 13:37:20 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:20 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0xd2) 13:37:20 executing program 5: 13:37:20 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:20 executing program 5: [ 1484.473559] input: syz1 as /devices/virtual/input/input177 13:37:20 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) signalfd(r0, &(0x7f0000000080)={0xffff}, 0x8) write$P9_RRENAMEAT(r0, 0x0, 0x10) fstat(r0, &(0x7f0000000000)) 13:37:21 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:21 executing program 5: 13:37:21 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000140)=""/75, 0x4b) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:21 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) r1 = getpgrp(0x0) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$TCFLSH(r0, 0x540b, 0x4) 13:37:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000d00)={{{@in=@local, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c) 13:37:21 executing program 5: unshare(0x20020000) clone(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1485.282551] input: syz1 as /devices/virtual/input/input178 13:37:21 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:21 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000001640)={&(0x7f0000000000), 0xc, &(0x7f0000001600)={&(0x7f00000001c0)={0x1420, 0x1f, 0x100, 0x70bd29, 0x25dfdbfd, {0x1}, [@nested={0x234, 0x78, [@typed={0x4c, 0x29, @binary="1da52e026bc6f8754bb5300316471f03324a75ab694d15c50175819a3f208a44ef627d4164019d088f84a641f1c15b2ff9f5ef58a47f42b2ed33c71c6eda82fbec5723a143d76755"}, @generic="989b504370e9149b50739c6a46f15e3e18b23f5427b835765943ab6beb36e5cb5caf1ae4204d0b10d5aefa65c61596de6bbdca1a245262e302c915010b5e1503c462124ab0b1c0d9418eafdc946777010351758496518f74d5b767267ffdf7c73f8cc0e92e6afeb7b030484695aa34b1094146fe4979ade2ae4854966d052966fa36bc060758e9b70545290dc80a91478a1c788c6b54290d9c9b7790189915d7b298082df5f7d14ad152dc2439137ed03b01b4d6caa583e8c470fa5992501ec5bf8823d22d38025f4e9b3852134eb79eecafcd417a9adbcfc0ea8b97a0a2661b729d9250aa55a11666fc2b1fe7b7fb7538d221", @typed={0x8, 0x32, @u32=0x9}, @generic="b4958cd7248fb6d9ea1dce0a41f4db4278aee971a70fe8c46dde384abca405e9544e37b97859a0b10e43712683f1d0c589d72990b2256375acb44b46246966f75b4b4d5fc8767575ce57fe5325a1d0c172794d39612ce6fd4b82221bf5eac97b3f99ede66df5be72f2fa4e36f5978ff76abddcafcf8d86d4034ba79e667b3ca039e7111471ffcffad2e9628bdd527826082bcdb4f6d64f366eb7c9ef492c92763d360791f54680754973b3f750131f4b711d6b391548341a4e76777fa100a2f77e48a5baca2f810f447d2127979a93033ce3b94e00c0d75b49de82de18aae0362bf82ae9e079cf"]}, @typed={0x14, 0x5, @str='/dev/keychord\x00'}, @typed={0xc, 0x5d, @u64=0x40}, @generic="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", @typed={0x8, 0x42, @u32=0x4e}, @nested={0x8, 0xb, [@generic="3e8c"]}, @nested={0x94, 0xc, [@typed={0x8, 0x12, @uid=r1}, @generic="e499902256ba7e995b49a8e8c0746e096615e85ad53254060a53a6d4b4b47ef675153871344371d80293463494fa8d6c8b2474aef10675", @generic="285255f3f10a3ae7af762c59eadb6d7330d01efc780b4fd2feb42cdc1f822aead19a789d8af32c3cfde97115a64f75b24d841ca9788789495a8dfd293d5bbebbd8f95a6377e637728abef50b7076"]}, @nested={0x1004, 0x1a, [@generic="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"]}, @typed={0x14, 0x65, @str='/dev/keychord\x00'}]}, 0x1420}, 0x1, 0x0, 0x0, 0x40}, 0x4010) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:21 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x100) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x100000000004, 0x7fff, 0x1ff, 0xa3a, 0x10, 0x8, 0x0, 0x7, 0x4, 0x10001}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'ifb0\x00', @remote}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x10) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040)) 13:37:21 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000200)="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", 0xfc) [ 1485.365718] input: syz1 as /devices/virtual/input/input179 13:37:21 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000400)=0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) getresgid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) r7 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010002000000000002000000", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="04fc0000ce00080000000000", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="10000100000000002000040000000000"], 0x64, 0x3) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0xff4d, 0x8, 0xd28, 0x3, 0x6f9, 0x400}) 13:37:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002e80)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b00000005000000b807000000000000d0020000d002000048050000d0020000e8060000e8060000e8060000e8060000e806000005000000959d08091903bddfd10ba3a603fe587894b927586b03957f23087b3f511ddb77b6b53c2fb6a1", @ANYPTR=&(0x7f0000000d00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001c8010000000000000000000000000000000000000000000000002800736f636b657400000000000000000000000000000000000000000000000202000000000000009000737268000000000000000000000000000000000000000000000000000001ac05ff0600000000ff010000000000000000000000000001ff02000000000000000000000000000100000000000000000000ffff00000001ffffffff000000ffff000000ff000000ff0000ffffffffff000000ff00000000ff0000ffffffff00ffffffff000000008e0022000000000048004d41535155455241444500000000000000000000000000000000000000001000000000000500000000000000000000000000ac1414bb00000000000000000000000022000000ff010000000000000000000000000001fe8000000000000000000000000000bb000000ffffffff000000000000000000ff000000ffffff00000000000000000076657468305f746f5f7465616d00000076657468315f746f5f68737200000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000a80200000000000000000000000000000000c800080100000000000000000000000000000000000000000000000040005443504f5054535452495000000000000000000000000000000000000000bf29000003000000ff0100000000010008000000fdffffff00000800f9ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030027802000000000000000000000000000000000000000000000000300066726167000000000000000000000000000000000000000000000000000020070000390e00000700000010010000380172740000000000000000000000000000000000000000000000000000000000000000000400000000000000fcffff0502000000000000000000000000ffffac1414bbff020000000000000000000000000001fe80000000000000000000000000001b0000000000000000000000000000000000000000000000000000000000000001fe8000000000000000000000000000bbbb73b02ca1557ff784caa02123e67b7000000000000000000000000000000001ff020000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000000ffff7f0000010000000000000000000000000000000100000000000000000000000000000000fe8800000000000000000000000000010700000048004d415351554552414445000000000000000000000000000000000000000008000000fe800000000000000000000000000013ff01000000000000000000000000000140000068000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005801a001000000000000000000000000000000000000000000000000280069707636686561646572000000000000000000000000000000000000000009280000000000006800726174656573740000000000000000000000000000000000000000000000697036677265300000000000000000006272696467655f736c6176655f300000200002000700000006000000ffffffff84000000000000000200000000000000080000000000000048004e45544d415000000000000000000000000000000000000000000000000008000000e0000001000000000000000000000000ac141415000000000000000000000000001000680000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x818) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.origin\x00', &(0x7f0000000180)='\'keyring*lokeyring@,keyring\x00', 0x1c, 0x2) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x600, 0x0) [ 1485.451174] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1485.499568] input: syz1 as /devices/virtual/input/input180 [ 1485.555690] input: syz1 as /devices/virtual/input/input181 13:37:21 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000200)='/dev/keychord\x00', 0x40080, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1) 13:37:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x4000000000000005) dup3(r2, r0, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) writev(r0, &(0x7f00000024c0)=[{&(0x7f00000000c0)="0f", 0x1}], 0x1) 13:37:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0xfffffffffffffffe, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2]}, 0x45c) 13:37:22 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:22 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0xffffffffffffff1e) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:22 executing program 5: bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020dfff91000000000000000000000000800120000000100000000000000000006000000000000000000000014a6c020ecb957980000000000000000000000000001000000000000000020000000000003000600080008000200106cac14ffbbf00000000000000003000500000000000200423b5d632b91c520000000000000"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x2e565d7c36d98a1, 0x0) 13:37:22 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:22 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) uname(&(0x7f0000000080)=""/183) bind(r0, &(0x7f0000000000)=@sco={0x1f, {0xa9, 0x3, 0x0, 0x1, 0x49, 0x6}}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000001c0)={0x0, @speck128}) socketpair(0x3, 0x800, 0x200, &(0x7f0000000140)) write$P9_RRENAMEAT(r0, 0x0, 0x10) 13:37:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0xfffffffffffffed2}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0xffffffffffffffb7}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x7) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000efd000)=0x62) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000fddfff)) read(r0, &(0x7f00000000c0)=""/197, 0xc5) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) 13:37:22 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes128, 0x0, "c589f3a55bf823c3"}) [ 1486.251657] input: syz1 as /devices/virtual/input/input182 [ 1486.261288] input: syz1 as /devices/virtual/input/input183 13:37:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r1 = dup(r0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) 13:37:22 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x2003d, 0x0) unshare(0x20600) r1 = inotify_init() preadv(r1, 0x0, 0x0, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x10) write$selinux_access(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6574635f72756e74696d655f743a7330202f7362696e2f646863b46c68656e74203030303030301e7e69e430303030303030303037"], 0x47) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1000) openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) [ 1486.389516] input: syz1 as /devices/virtual/input/input184 13:37:22 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_ROPEN(r0, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x19, 0x0, 0x1}, 0x2a}}, 0x18) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x180, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'memory'}, {0x2d, 'pids'}]}, 0xe) write$P9_RRENAMEAT(r0, 0x0, 0xaa) [ 1486.435631] input: syz1 as /devices/virtual/input/input185 [ 1486.463048] input: syz1 as /devices/virtual/input/input186 13:37:22 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:22 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$smack_current(r2, &(0x7f0000000040)='{[\'\x00', 0x4) 13:37:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r1 = dup(r0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) [ 1487.050886] input: syz1 as /devices/virtual/input/input187 13:37:23 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_ROPEN(r0, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x19, 0x0, 0x1}, 0x2a}}, 0x18) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x180, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'memory'}, {0x2d, 'pids'}]}, 0xe) write$P9_RRENAMEAT(r0, 0x0, 0xaa) 13:37:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:23 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r1 = dup(r0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) 13:37:23 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_ROPEN(r0, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x19, 0x0, 0x1}, 0x2a}}, 0x18) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x180, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'memory'}, {0x2d, 'pids'}]}, 0xe) write$P9_RRENAMEAT(r0, 0x0, 0xaa) [ 1487.283493] input: syz1 as /devices/virtual/input/input188 [ 1487.300349] input: syz1 as /devices/virtual/input/input189 13:37:23 executing program 5: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x40) write$P9_RMKNOD(r2, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x10, 0x0, 0x4}}, 0x14) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) dup(r0) [ 1487.356598] input: syz1 as /devices/virtual/input/input190 [ 1487.394732] input: syz1 as /devices/virtual/input/input191 13:37:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x40000, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0xfffffffffffffe42}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000000d00)=""/219, 0xdb}], 0x7) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x141000, 0x0) write$P9_RWRITE(r1, &(0x7f0000000180)={0xb, 0x77, 0x1, 0x6}, 0xb) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x240000, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000080)={0x1, 0xa3, 0x1, 0x1}) 13:37:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) dup(r0) [ 1487.504992] input: syz1 as /devices/virtual/input/input192 [ 1487.531405] input: syz1 as /devices/virtual/input/input193 [ 1487.552480] input: syz1 as /devices/virtual/input/input194 13:37:23 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:23 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x181080, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x1000, 0x80000000, 0x80000000, 0x3, 0x1f, 0x101}) write$ppp(r1, &(0x7f0000000100)="30ec25b080f7f85eba2f5c7d8bedff0c3618bf5fc6c93f187be54775363a46d28750ef", 0x23) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) [ 1487.920888] input: syz1 as /devices/virtual/input/input195 [ 1487.925976] input: syz1 as /devices/virtual/input/input196 [ 1487.999413] input: syz1 as /devices/virtual/input/input197 [ 1488.041106] input: syz1 as /devices/virtual/input/input198 13:37:24 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) sched_getattr(r1, &(0x7f0000000100), 0x30, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x18000) 13:37:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:37:24 executing program 5: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:37:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) [ 1488.229372] input: syz1 as /devices/virtual/input/input200 [ 1488.296480] input: syz1 as /devices/virtual/input/input202 13:37:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0xffffffffffffff83}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228, 0xfffffffffffffdc3}, {&(0x7f0000000100)=""/74, 0xffffffffffffff26}, {&(0x7f0000001d00)=""/219}], 0x10000000000000a1) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1488.419526] input: syz1 as /devices/virtual/input/input204 [ 1488.443014] input: syz1 as /devices/virtual/input/input205 13:37:24 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:37:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {0x1, 0xfff, 0x7fff, 0x7fff}, 0x20, [0x6, 0x37, 0x5, 0x8, 0x68d, 0x4, 0x8, 0x7, 0x1, 0x3, 0x3, 0x2, 0x8000, 0x1, 0x4, 0x1, 0xfff, 0x81, 0xffffffff, 0x40, 0x23, 0xffff, 0x1, 0xffffffffffffb33f, 0x9, 0x962be8e60000, 0x3, 0x2, 0x4, 0x4, 0x9, 0x81, 0x4, 0x7, 0x2, 0x6, 0x40, 0xfff, 0x1, 0x0, 0x2f30ed6a, 0x5, 0x401, 0x5, 0x80, 0x3, 0x0, 0x7fff, 0x0, 0x6c5, 0x8, 0x7, 0x9b, 0x8, 0x6, 0xb27, 0x5, 0x24000000000000, 0x8, 0x2, 0x8, 0x5, 0x100000001, 0x8001], [0x80000000, 0x80000000, 0x9, 0x0, 0xffffffffffffff75, 0x4, 0x1, 0x6, 0xffffffff, 0xa39, 0x4, 0xb0c, 0x50bf, 0x200, 0xfff, 0x3, 0xaa, 0xea2, 0xfffffffffffffffe, 0x0, 0x982, 0x3, 0x9, 0x8, 0x1, 0x5, 0x6, 0x80000001, 0x2, 0x4, 0x3, 0xfffffffffffff001, 0x100000000, 0x80000001, 0x0, 0x7fff, 0xa335, 0x4, 0xe06, 0x4, 0x4, 0x101, 0x6, 0x1, 0x40, 0x5, 0x3, 0x6, 0x80000001, 0x7, 0x81, 0x5, 0x100000001, 0x4, 0x4, 0x0, 0x2, 0x10001, 0x80000001, 0x3ff, 0x1, 0xfffffffffffffe01, 0x200, 0x7], [0xfffffffffffffffd, 0xff, 0xd31, 0x2761, 0x6, 0x6, 0x2, 0x1, 0x7, 0x6, 0x8, 0x8000, 0x5, 0x9, 0x2, 0x800, 0xfc2c, 0xf42f, 0x9, 0x8, 0x9, 0x9, 0x7d98, 0x4000000, 0xba, 0x1000, 0x4, 0x5, 0xffffffffffffffff, 0x3fb, 0x5, 0x2, 0x3, 0x10000, 0x1000, 0x9, 0x100000001, 0x0, 0x8, 0x81, 0x7, 0x2ab3, 0x5, 0x3960b6a1, 0x101, 0x4, 0x100000000, 0x1, 0xee, 0x3, 0x3f, 0x2, 0x100000001, 0x0, 0x3c7cb942, 0x2ae6, 0x100, 0x8, 0x7f, 0xffff, 0x9, 0x3, 0x2b7, 0xfff], [0x3, 0x1, 0x1, 0x62, 0x81, 0x1f, 0x100000000, 0x6, 0x1, 0x46, 0x5, 0xffffffffffffffc0, 0x1, 0x4, 0xdc, 0xffffffff7fffffff, 0x2d6f5231, 0x8, 0x2d, 0xde8, 0x3, 0x63, 0x80000001, 0x6, 0x0, 0x3, 0x5, 0x10001, 0x200, 0xa234, 0xd473, 0x20, 0x7, 0x0, 0x5, 0x80000000, 0x4038, 0xffffffff80000000, 0x2, 0x4, 0x6b7, 0x7f, 0x7, 0x2b78, 0xffffffffffff0000, 0x80000001, 0x200, 0x81, 0x0, 0xfffffffffffffffa, 0x1, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x21bb, 0x7, 0x3, 0x400, 0x7ff, 0x1, 0x7f, 0xf9, 0x3, 0x1, 0x40]}, 0x45c) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:24 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x3, 0x5, 0x3, 0x5, 0x0, 0x3f, 0x1020, 0x3, 0x800, 0x8, 0x0, 0x6, 0x9, 0x6, 0x80000000, 0x60, 0x1, 0x180, 0x3, 0x7, 0x9, 0x7ff, 0x2, 0x79, 0x10001, 0x9, 0x50, 0x7fffffff, 0x5, 0x2, 0xff, 0x9, 0x5, 0xfffffffffffffc01, 0x4, 0x3, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x3000, 0x7fff, 0xfe, 0x5, 0x20, 0x9}, r2, 0xe, r0, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) [ 1488.761456] input: syz1 as /devices/virtual/input/input206 [ 1488.792332] input: syz1 as /devices/virtual/input/input208 13:37:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:37:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x8) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000d40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f0000000d00)={&(0x7f0000000d80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100428bd7000fbdbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000cf209fdf7e3cc034725c0846ad1ba7b1aee153d098181890aa05fa2098e6b6a1c94099b4816840"], 0x30}}, 0x24004040) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) 13:37:24 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:25 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:37:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {0x0, 0x0, 0x0, 0x7}, 0x0, [], [], [0x0, 0x0, 0xfffffffffffffffe]}, 0x45c) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r1, 0x0, 0x14, &(0x7f0000000080)='/ppp0*ppp1.$cgroup!\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs(r2, &(0x7f0000000100)='status\x00') 13:37:25 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) [ 1489.116066] input: syz1 as /devices/virtual/input/input210 [ 1489.176336] input: syz1 as /devices/virtual/input/input212 13:37:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x80000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000080)={0x14, 0x11, 0x1, {0x0, 0x1, 0x1}}, 0x14) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4766]}, 0x45c) 13:37:25 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:37:25 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rfcomm\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) readv(r1, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x45c) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) 13:37:25 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) r0 = add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x220403fa) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8000000000000000, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0xfffffffffffeffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:25 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(0x0, 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:37:25 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ')[vboxnet1wlan1em1!%ppp1vboxnet1trustedself^(\x00'}, 0x33) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'ip6erspan0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4f7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) shutdown(r1, 0x1) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1489.628030] input: syz1 as /devices/virtual/input/input213 [ 1489.693410] input: syz1 as /devices/virtual/input/input214 13:37:25 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:37:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x8a) r2 = dup(r0) dup(r1) renameat2(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) restart_syscall() ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x602900, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x4) 13:37:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x20300, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) [ 1490.005279] input: syz1 as /devices/virtual/input/input215 [ 1490.069009] input: syz1 as /devices/virtual/input/input216 13:37:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:37:26 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) getuid() ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:26 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(0x0, 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:26 executing program 5: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000080)=0x3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8000000000000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) [ 1490.535020] input: syz1 as /devices/virtual/input/input219 13:37:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:37:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000000)=0x80, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000d00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x238, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x148, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5fa5}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f7d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0x70, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4ca3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:26 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x45c) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x8007, 0x1, 0x453, 0x8000, 0x866}) 13:37:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:37:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) [ 1490.876376] input: syz1 as /devices/virtual/input/input222 13:37:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) [ 1490.935400] input: syz1 as /devices/virtual/input/input225 13:37:27 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_proto_private(r0, 0x89ee, &(0x7f0000000180)="fac70bdf56bab50c99e99d09a2c50fd0add47391b868a2bac6b24410ea66815cb62d715405449f09af32a0559093eef166dbe7c2a7d7c48171f3568d38b57fc4cfdf8d119852c3044ed96792983800742b3397fa83991fc0d45af8a81889c1fb772f78ace3aab21c82f952c19ac82fac59b87fe37e4be731689a5aa3f902d7006e486c7114315e46b16ffd745c38e50f2ff115c9d092361509eed0f11c72461d40") ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x22, 0x4}, &(0x7f00000000c0)=0x0) timer_gettime(r2, &(0x7f0000000140)) poll(&(0x7f0000000000)=[{r0, 0x121}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:37:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) r1 = socket$inet6(0xa, 0x5, 0x2b96) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000dc0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000e00)=0x10) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000140)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x84, 0x83) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000d80)=0x80) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000d40)={0x1f, 0x14, &(0x7f0000000d00)="9fc12d200af1d0f3ac892a03528d527132a9bf27"}) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000e40)) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:27 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(0x0, 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) finit_module(r0, &(0x7f0000000000)='/dev/uinput\x00', 0x3) 13:37:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) [ 1491.422774] input: syz1 as /devices/virtual/input/input227 [ 1491.487365] input: syz1 as /devices/virtual/input/input230 13:37:27 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:37:27 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000080)={@mcast1}, &(0x7f00000000c0)=0x14) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:27 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000080)) sendto$inet6(r3, &(0x7f0000000140)="114c98927af811dfe3708909c3118e470672d2201082", 0x16, 0x40004, &(0x7f0000000180)={0xa, 0x4e23, 0xcc83, @remote, 0x9a}, 0x1c) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x9, 0x100000001, 0x7, 0x8}, 0x2c) r4 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x40020820000, r4}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x1}], 0x1, 0x7fffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r3) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000001c0)={0x80000001, 0x7, 0x1000}, 0x4) dup2(r6, r6) fcntl$setsig(r6, 0xa, 0x30) 13:37:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0xc, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x3, 'fo\x00', 0x8, 0x8001, 0x6b}, {@multicast2, 0x4e22, 0x2, 0xfb, 0x4, 0xfffffffffffffff7}}, 0x44) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000d80)='y\x00', 0x2, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000d00)="1b13ae52c04a5baae62b947090234e451f187cd6fb1030d0c90d20e705cbe6dfbc261e074d6b934fefa29fdb02f78cbe6f05d651976cfa8763ade0539bfac2b50875aff8fdcfec299c29b1f6e77bbbd17470b02ad28c15dc32816c7c96ccc6ed15") readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) write$binfmt_misc(r1, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x133) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000fc0)={'broute\x00', 0x0, 0x3, 0x37, [], 0x7, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000f80)=""/55}, &(0x7f0000001040)=0x78) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) 13:37:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:37:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0xfffffffffffffffa, 0x0, 0x8}) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) [ 1491.759729] input: syz1 as /devices/virtual/input/input231 [ 1491.838268] input: syz1 as /devices/virtual/input/input234 13:37:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:37:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) ptrace$setregs(0xd, r1, 0x100, &(0x7f0000000100)="0360efc7d9ded2b456d196d0fd21134417c33166d31ab1e999e75fd05765324fa694b57cb5ad") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x57, 0x2, 0x1}, 'syz1\x00', 0x2e}) 13:37:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) 13:37:28 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 1492.298925] input: syz1 as /devices/virtual/input/input237 [ 1492.358581] input: syz1 as /devices/virtual/input/input238 13:37:28 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:37:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) write$P9_RGETATTR(r1, &(0x7f0000000100)={0xa0, 0x19, 0x1, {0x2, {0x8, 0x3, 0x5}, 0x0, r2, r3, 0x4, 0x8195, 0x1, 0x1, 0x5, 0x100000001, 0x7ff, 0x9, 0x5, 0x6, 0x180000000000000, 0x0, 0x1ff, 0x1f, 0x2e6}}, 0xa0) 13:37:28 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000014c0)='/selinux/enforce\x00', 0x101000, 0x0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x404200}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, r0, 0x0, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4c801) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x4000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9a) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000001c0)=0x0) tkill(r5, 0x35) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f00000000c0)) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x10) 13:37:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) fcntl$getflags(r0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:28 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 1492.604121] input: syz1 as /devices/virtual/input/input239 13:37:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000080)=""/150) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) pipe(&(0x7f0000000200)) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.sockprotoname\x00', &(0x7f00000001c0)='/dev/uinput\x00', 0xc, 0x1) 13:37:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) [ 1492.647608] input: syz1 as /devices/virtual/input/input240 [ 1492.708239] input: syz1 as /devices/virtual/input/input241 13:37:28 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x400, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000200)={0x6, &(0x7f00000001c0)=[{0x200, 0x7fffffff}, {0x0, 0x7}, {0x7fffffff, 0xf4f}, {0x7, 0x7}, {0x1, 0x4}, {0xfffffffe000000, 0x1}]}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, r0, &(0x7f0000000080)="f91d3a", 0x3, 0x800, 0x0, 0x0, r3}, &(0x7f0000000140)) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$TIOCGPTPEER(r3, 0x5441, 0x9) prctl$PR_SET_KEEPCAPS(0x8, 0x0) [ 1492.757803] input: syz1 as /devices/virtual/input/input242 13:37:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:28 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 1492.862361] input: syz1 as /devices/virtual/input/input243 [ 1492.935608] input: syz1 as /devices/virtual/input/input244 13:37:29 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) 13:37:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) personality(0xc0000c) [ 1493.448420] input: syz1 as /devices/virtual/input/input245 13:37:29 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') write$P9_RWRITE(r2, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x20}, 0xb) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x80002, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x17, 0x58, &(0x7f0000000080)="0585d0d4cabb349a652b9d8f5bfa758072e99074173a696da7a982a4ba80b4b0e2f72a18d2adfd77d481e8a3e2fdc1f517120eb23deed05917d438c5d2c6b39df901f8ccad8fb70e6848c2a440edce4c90aa76e4bd418146"}) 13:37:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, 0x0, 0x0) 13:37:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x2000, 0x0) r1 = dup2(r0, r0) openat$cgroup_ro(r1, &(0x7f0000000140)='cpu.stE-\xecDo\xce\x1f\xd3V\x03O\x8a\xbf\xd9h\xc3\xd4\xea\x13\xe72Z\x01\x00V\xfb\x1fg\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x31) 13:37:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x40) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xffffffffffffff6f, &(0x7f0000000140)={&(0x7f0000000100)={0xfce1, r2, 0x0, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x3fff}, 0x1ffffffc) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000000)=""/11) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) setxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "d8862a49ee8ad82c4f89ca26f0bfc76b"}, 0x11, 0x3) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1493.589370] input: syz1 as /devices/virtual/input/input246 [ 1493.601832] input: syz1 as /devices/virtual/input/input247 13:37:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, 0x0, 0x0) 13:37:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000040)=""/232, 0xe8, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) rt_sigreturn() write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) socketpair(0x3, 0x807, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0xb6, @empty}}, 0x0, 0x7, 0x0, "8e3c2311bb759a7b976cc25c196f1a50c7305b570b54d80673d691c21f1b1c915e7ac1649841da10149ccc08a7be5262eb1dece87761735b0626babe21bd2cd7c5289bd6b73a054104a7e946e34e5de9"}, 0xd8) 13:37:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) [ 1493.681360] input: syz1 as /devices/virtual/input/input248 13:37:30 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) alarm(0x4) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:30 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 1494.313208] input: syz1 as /devices/virtual/input/input250 13:37:30 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="6ecd48fcc885244c348b7c71716932d3bf7938e1fbf866dcc1518568dca2456261fa4e058caf1a8917c4fd9f0543870f19c47d74981783b14e3e5ed573f6cb82197a059991a94dded6c5e05ed4e996f7c71e9ccfb10427dc4d254638a8241c77355bff70f600999f8128a091890d7e221c34c22bf89b39e40b097ed50a2caf604db9dd6d261b6cb49725cdafbd5bd40fec9db0b96a842c6f01c0d03a29c4d2de8564927548097b39ac2e6ede7b41e0e02de89b5176f61937002b994cc5ee26ba5cb103cf3854b676bd51ff1ad04b4126") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000180)={0x1, 0x7, 0xd0d}) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:30 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x101000, 0x0) accept4(r2, &(0x7f0000000140)=@xdp, &(0x7f00000000c0)=0x80, 0x80800) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, 0x0, 0x0) 13:37:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x2, &(0x7f00000000c0)={{r1, r2/1000+30000}, {r3, r4/1000+10000}}, &(0x7f0000000100)) r5 = getpgrp(0xffffffffffffffff) ptrace$pokeuser(0x6, r5, 0x9, 0x7fffffff) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x100, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x8, 0x10001, 0x7, 0x3}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1494.471878] input: syz1 as /devices/virtual/input/input252 [ 1494.481880] input: syz1 as /devices/virtual/input/input253 13:37:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/74, 0x4a}], 0x6) 13:37:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x1000000000000000, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x10) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = gettid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000d00)={0x2544, 0x11, 0x0, 0x708, 0x70bd25, 0x25dfdbff, {0xf, 0x0, 0x6}, [@typed={0x4, 0x3c}, @typed={0x14, 0x35, @ipv6=@ipv4={[], [], @broadcast}}, @nested={0x10bc, 0x24, [@generic="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", @typed={0xc, 0x66, @u64=0x2}, @typed={0xc, 0x7d, @u64=0x6}, @typed={0xa0, 0x6a, @binary="1955c6e648113a79fce8e3b3f977f2387f324da14cf63a3d70029fae34c78c434f93502fa664670207da29edbcc4718809dcfb79facca68c4098bab0caccce00420576ccdae7720c94b78b177c82968fc454a8f20925407c095ffb4a356fd0e8906028d06d1d22579452b57a68a23fa8a57614e9e084677ff7e3d23297c29c6861fb4817d2668e6d73b392e5ff88c8a228798d1c4c4616feff"}]}, @generic="780a32549d1470da82753cd8cdd680562fa7e7b91a3f118bb5c48158a5530a171f9f35ba42b31b0af2a71cab782883d95b4945b6cebd4760f412a78b8d6697e3efe7c9cd8d3814b7877f72221bb32ef33845c56c4d66c4", @generic="f28ae43cdbee39aef533f1121fc152fca0d7bcd1a5ae92d1a8171db7e1540b49", @typed={0x8, 0x26, @u32=0x40}, @nested={0x1b0, 0x3e, [@typed={0x98, 0x7c, @binary="6c40ad7f701de6a804d641084fe3d5dc6c2e5c25e93a10a98103d03a1a335e40aa475d06c2fb328ee40b593af1da52a6fe432cc5109af39ea20a8f0214acd5875e479d0d6904542b48cbc4498fd7d77846e382f97cb413f51b884201af8991d549d50534fb08ab569c970f62ace3c180b2d7f112168ce835d349829ab7039b023bbccaeb080cfc1ec8a3d6d558dfe81f16c5"}, @generic="8b0c70faa19bebd2c10a2447bb7c951e42bdce7674aa47867ae043348942f2884895894b7842d69e7db0164d36ca4b9a4875131cab6722fb755bd8c23c9278f796ce1f7493978022a68921c40c11fc35e147b06f2859e5b5484ca12997a4d559db494dcb7dda979d5640c6da001a58ed195aba9153", @generic="8de407f6e786521076c5035124b488", @typed={0x8, 0x79, @uid=r2}, @generic="932b11ff3aee6b0d1658fa87e715901600e3daf9d72637ee355bbfa97914d88e38718aca2e76dc3524c63e445c7d63b9de9d33c34982133821ff0fdc97", @typed={0x40, 0x68, @binary="1bf040016bd1243e8a12d33b48865cd0c634725207d426f2968d724454ab4ba4c33fb8bfb6dd476817fa97c941372874d1f6eab3be38507798fa4d"}, @typed={0x8, 0x1, @pid=r3}]}, @nested={0x208, 0x3e, [@typed={0x8, 0x66, @pid=r4}, @generic="9896cc886227afa173cac23599ed8fea577f27fd7e2c70b9dac8efd72f902e87c540a517db0391921e1cc962e28d2e0d9133dec608f817b11230806feb32c2748cbf6cf8f4634375dbd2dc4f51ef0c2b18859d04c879b81dc3cc8da1c810d77de02e485ddae12ba7a1008ba8861ed39030ad8669e813150350070b81183bb7e2a8b1d77bb3762d16211938ea911504876ed4f20417085b19423ad8a5e5c7062318e30c8347742b31dcbe", @generic="b6d7e3d63b25fedb563786ffdd5c8439339bdc49a8d69470888948978d558d4b99f3147d552c43fc14f8993c4f0e994d9d2f48693ffda7f60652aeab554d43b73440c62553c84f34a8fba020f316f545ae10bf2d785ff8d2053115d2c0e00d7914c0bc35a406c62afd1382637dee09f11582ad2d144e9d712973f734ba0b246171", @generic="5ac9f18f1dd93010cf331799add9c8560647fb72701a13276d0842ab7eabba0a5bdee08c8be4661c65f4a15c62eb420d60360c2d215f6d660f6eb6386ce63159297c14dab578c8fde1c765a9a076c1a98b6818bdf4532591350f01689e8ec8586db4289f67ff025199ae57510f9bb87c5b7eb4dbe0bfdf45b012163811d8065e064e19999f6fb219f24f8e246490d1bbfc7213343615e0ff13b5ebbdabbe660abf850bb937c6cda515f00e6ce9cdb75d00686565fc24d43137ed789aadbadfc6087b18983708be7fcf93d7558a70884c"]}, @nested={0x1024, 0x8e, [@typed={0xc, 0x95, @u64=0x51f}, @generic="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", @typed={0x14, 0x6a, @ipv6=@empty}]}]}, 0x2544}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) [ 1494.554563] input: syz1 as /devices/virtual/input/input254 13:37:31 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:31 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0x10) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x80000) ioctl$FICLONE(r0, 0x40049409, r1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$uinput_user_dev(r2, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/228, 0xe4}], 0x5) 13:37:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x324}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228, 0x223}, {&(0x7f0000000d00)=""/74}, {&(0x7f0000001d00)=""/219}], 0x126) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 1495.185392] input: syz1 as /devices/virtual/input/input256 [ 1495.193293] input: syz1 as /devices/virtual/input/input257 13:37:31 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001200)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000140)=""/4096) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) r1 = syz_open_pts(0xffffffffffffffff, 0x30000) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="0b7c91dd6620f5ab7d955eb83f328ba09359") add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:31 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 13:37:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17]}, 0x45c) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:37:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}], 0x4) [ 1495.254582] input: syz1 as /devices/virtual/input/input258 13:37:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r1 = socket(0x19, 0x80005, 0x8) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x300, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8c1}, 0x20000040) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {0x0, 0x0, 0x0, 0x1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70eec274, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x45c) 13:37:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ptrace$peekuser(0x3, r1, 0xfff) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000080)) 13:37:31 executing program 5: msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1495.344492] input: syz1 as /devices/virtual/input/input259 13:37:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x6e}], 0x3) [ 1495.403539] input: syz1 as /devices/virtual/input/input260 [ 1495.463272] input: syz1 as /devices/virtual/input/input261 [ 1495.516184] input: syz1 as /devices/virtual/input/input262 13:37:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x0, 0x4, 0x0, 0xfffffffffffffffe], [0x0, 0x0, 0x0, 0x0, 0x5]}, 0x400) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xd) 13:37:31 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000f80)={0xa8, 0x0, &(0x7f0000000e00)=[@reply={0x40406301, {0x4, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000080), &(0x7f0000000100)=[0x18, 0x0, 0x58]}}, @release={0x40046306, 0x3}, @register_looper, @register_looper, @transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x50, 0x50, &(0x7f0000000d00)=[@ptr={0x70742a85, 0x1, &(0x7f0000000140), 0x1, 0x1, 0x3e}, @ptr={0x70742a85, 0x1, &(0x7f0000000180), 0x1, 0x0, 0x1a}], &(0x7f0000000d80)=[0x0, 0x0, 0x60, 0x38, 0x18, 0x78, 0x0, 0x38, 0x48, 0x0]}}, @request_death={0x400c630e, 0x0, 0x4}], 0x8d, 0x0, &(0x7f0000000ec0)="2a0dfd8c2ae7c377072dd28e85f3e612419af791fd01bb2cf096156cac030dc8e7004c565161bf8ef4dacf9b0635263ad80cc8529927be9d714aa5b3e59e0a171d6444032fa09d618ec511d1baf467907c5a2bfbebc0cb7dda60ce13930ece9485f3e1a30d49943658255060f8eb1289bd74a24b5cc56a9d7612f03f9d96e22f18b4b32cb85d4b78374e206698"}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0xa5c7, 0x1, 0x7fffffff, 0x3f, 0x101}, 0xc) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000000c0)=""/10, 0xa}], 0x2) [ 1496.057749] input: syz1 as /devices/virtual/input/input265 13:37:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}], 0x1) 13:37:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2000001000000006, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {0x0, 0x0, 0x0, 0x3}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r4 = dup2(r2, r2) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x68, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa86}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x8000, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x80001000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x1000004, &(0x7f0000000680)={[{@mode={'mode'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, ',(\\'}}]}) fcntl$dupfd(r8, 0x0, 0xffffffffffffffff) fcntl$notify(r3, 0x402, 0x1e06d73802273095) pwritev(r1, &(0x7f0000001b40)=[{0x0}], 0x1, 0x0) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, &(0x7f0000000380)={0x101, 0x802, 0x40000000000}) open(&(0x7f0000000240)='./file0\x00', 0x2, 0x10) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000400)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x40810) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r9, 0x540b, 0xc3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 13:37:32 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={r0, 0x8, 0x40}, 0x0, &(0x7f00000000c0)="9e1eb6365722d59e0297e66cdb0d4fc4aaaad671a8e3cb4542ea2013e11a", &(0x7f0000000140)=""/133) 13:37:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) fremovexattr(r0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0]) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f0000000ec0)=""/10, 0xa}, {&(0x7f00000001c0)=""/110, 0x5e}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/228, 0x51b}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000001d00)=""/219, 0xdb}], 0x1) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x6, 0x0, 0xfff, 0x40, 0x0, 0xfffffffffffffff9, 0x1080, 0x2, 0x1, 0x0, 0x7f, 0x8, 0x2, 0x8000, 0x2, 0x1, 0x7fffffff, 0x4, 0x101, 0xbb, 0x20, 0xffff, 0x80000000, 0x1ff, 0x69, 0x7, 0x100000001, 0x1000, 0x0, 0x4, 0x3, 0x5, 0x4, 0x100000001, 0x2, 0x4, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x20, 0x1, 0x2, 0x7, 0xff, 0x3, 0x9}, 0x0, 0x7, r1, 0x2) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x100]}, 0x45c) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000d40)={@multicast1, @loopback}, &(0x7f0000000d80)=0xc) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000d00)) 13:37:32 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 1496.207828] input: syz1 as /devices/virtual/input/input266 [ 1496.219376] input: syz1 as /devices/virtual/input/input267 13:37:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00), 0x0) 13:37:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00), 0x0) [ 1496.289170] input: syz1 as /devices/virtual/input/input268 [ 1496.313775] input: syz1 as /devices/virtual/input/input269 13:37:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f0000000080)='\x00', 0x1, 0x2) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, 0x45c) write$P9_RRENAMEAT(r0, &(0x7f00000000c0)={0x7, 0x4b, 0x1}, 0x7) 13:37:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) [ 1496.382049] input: syz1 as /devices/virtual/input/input270 13:37:32 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 13:37:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x1, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) r1 = request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='syz1\x00', 0xffffffffffffffff) request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='+security\x00', r1) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xa) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00), 0x0) [ 1496.915282] input: syz1 as /devices/virtual/input/input271 [ 1496.916253] input: syz1 as /devices/virtual/input/input272 13:37:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 1496.956604] input: syz1 as /devices/virtual/input/input273 13:37:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{0x0}], 0x1) 13:37:32 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = fcntl$dupfd(r1, 0x0, r1) getpeername$unix(r2, &(0x7f0000000140), &(0x7f0000000040)=0x6e) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:33 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{0x0}], 0x1) 13:37:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) inotify_init() ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) write$UHID_CREATE2(r0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000003e0002000100000008000000030000000000000096543108551d3c8b448f58504490a25b6e5f1c5cb40480e60d9ed357bb17cb2eaa48828d7dd728f56fc7b38697bb9f57f1eb75be318269d1f3f70aa5c298d0bab288faa1d12fb0fe76d3b47978f44db011b3635030846cf9ce9f259e02ad1774f8676f9d0c5f6663cddf667dd5b82f72d811678b53b7a78f77e83325ea5652e46e6554a94f1393bbeba75932fd4fbcaec4a30401357751376dfacd240e638d15987fba9cfcb74b0503df58da8c59a823fcb0978950f7ac0948558dab14f4af55b7"], 0x156) write$P9_RRENAMEAT(r0, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7) [ 1497.089029] input: syz1 as /devices/virtual/input/input274 13:37:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x100, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) [ 1497.154408] input: syz1 as /devices/virtual/input/input275 [ 1497.169196] input: syz1 as /devices/virtual/input/input276 [ 1497.223368] input: syz1 as /devices/virtual/input/input277 13:37:33 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 13:37:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{0x0}], 0x1) 13:37:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x102, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:37:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000d00)={{{@in6=@initdev, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000e00)) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000f80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x21000}, 0xc, &(0x7f0000000180)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="7c011007", @ANYRES16=r2, @ANYBLOB="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"], 0x17c}}, 0x48084) sendfile(r1, r1, 0x0, 0x5) 13:37:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/tcp\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000140)) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_proto_private(r2, 0x89eb, &(0x7f0000000080)="73c0bbee82b0eb9147563b4104306c64c8045129b575d4608512319e19dabb6ae10c6d0f3b2c89c6121bd2cdfebfa6a483dbe875e17055826bbc6788ba9c727954e2e29816c5d1305fabdef2605be3611fd073c5d03a2887") write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) fsetxattr$security_evm(r1, &(0x7f0000000180)='security.evm\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="bee275709801d3e37ed345ea1fbe3cd33c2fd8d437a324421a3bbcbc841b210da3ce28ed9d52b2a6c02ed5c9e1d9b48acfc9300a4513f70c151f9fbd5eb7463e216b8276172b1cf218062b4e6d817e82bee93ad112bd51013b69d92590097e2a6cb8005a6c8e23e107a39c27d27181369ade2624793c0b5b4df2d7e1d52364f700a3cf9763aa35c7067b1a7a80723e99dd07b4165e6e8c2189733f29bc05b5"], 0xa, 0x3) 13:37:33 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10280, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) syz_read_part_table(0x2, 0x7, &(0x7f0000000f00)=[{&(0x7f0000000080)="1c41e4b56c3ffad0081e9ed16ab02f56f80258c837eabc0176f6facdd0321a6640732992f29ea334ab44ac3831eadbfa0e4a273a701c2a5c4de930f470b7e3a1cd498888bdd9e3db28a926840c55ba71b534f89b7830221fbd4f2d558840d25f0ef1d58ede2d42e898409d18d2a477c8299ca5f3308fa156d33d97bb8a63b0cb05860376f759b1a0ba8faf9a607a7f67e166fe74992fcd2e73748f031110925fc4d26ebbc900e34e8305dc92a0d15cb13ae49f5341fdd0fb63255c2b696dc5fc43", 0xc1, 0x9}, {&(0x7f0000000180)="6c75eddd8e01fb43571f99b878f10c61d1bbb443ca496c7d1aaf9841975ed3c43beda3ce87adf1e98166f08785a1ed37f7d53fd27cafe4de343e85d84db626f013b12ac39bc44f2ca4ffd9fa7a3e705a7ce710fe2c4e124f266cc7280360724b65ec7a8606221d982483f3d0fd31a45ebc624a0c3ab0b39149c8ae1a273d16d4b842f3b13f85c030d52dff358239270454a2fe8c1b14c60ba158765c07f517b80fbaad0a936b42bc3107c4c1d49b9ecf12309abad7a2ecbe0c7c2fdf97c1d4bfc2da679557de29a0ba1d04803871f694e64762035ce0f0f0005136b7dadf19edecb047cb32eae5ca03e81589f785bd686aa5138060c9", 0xf6, 0x1}, {&(0x7f0000000280)="17c7b2d417b02cf49a770b0f3b6b71dbd31529aeb2b40e491178126f7311b1bea43f7ae2503d722c051b7e3a6cb1d3ab708363ceba18108787085e78a548f82a21c8bfa9790bd9b1a3d35e1b409ad2ca2598fb1377a92a666b5cb2d7d9c6df7694b8f1cdbb80ee06e16470bdb28d519b42892e511a996c0d0e9716796fdb0bf823", 0x81}, {&(0x7f0000000340)="950909a23fa60fbfad946076c24246871846dc71b9e26c757d0a3022f373683c4b6abf0df921ae47c3f68eae09877e3daed182305a9ab65f78d04913be68cca4b29dfa0934b79ffbc21d21a9f2", 0x4d, 0x2}, {&(0x7f0000000d00)="43a5c1591c4c1e3e0dcb6f591752a624f8ecafe8fcffd63c1a05cf0c0449f4bbd877f4b63a6e56a907bde525d892e996aae0bbef236e9bef6cd33a8fa5657c9113b162cb8d74cfb95e4c1488c8785a786de8abe18cd2b3ee71534f82bf64df50a8277bd48fbe0669ab4cb9e2e439424217f889f6fa1d2be506a47447779f17bc77fccd2a951b04710055382c62aeb3d270923fd083f58aad81fe4b37725e7f2055f425af6f07c51cf5e9201afef7197c69f760ace55b057b0f629b0331733e482718f4c6e59da712a085dd0bd744ebdb4bb45daae6d7861733f2a0b74e9a902bd522240eb90f5b7b28", 0xe9, 0x8}, {&(0x7f00000003c0)="232b97e804", 0x5, 0x3610}, {&(0x7f0000000e00)="b84ededd1197d6649da40f5d0d6c5524e97827fb8020a0c13c99e6842022f4fe9b55f3a400b40f90ea25993a4ec17afb80994b8f5509808644c2958812969e66c689787dc4e2307556022a19b945209a9593ead3c1215a161b61a9f579b978abaf24c28bfa79bf63363c863a688968c766321e0091f729ac7c2cad82a2de3e30cd7879a1bdadf1439532990ebe82ae5227e8d7a040becab6250f9e4aa5741e27e42250e310fdd8daebf32a5053f099ebd2299f9532d3d680340570a8225d6fbec46121", 0xc3, 0x3}]) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) [ 1497.792698] input: syz1 as /devices/virtual/input/input278 [ 1497.800616] input: syz1 as /devices/virtual/input/input279 13:37:33 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x330, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 1497.890216] input: syz1 as /devices/virtual/input/input280 13:37:33 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:33 executing program 1: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 13:37:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001e00)=[{&(0x7f00000003c0)=""/24}, {&(0x7f00000000c0)=""/10, 0x10d}, {&(0x7f00000001c0)=""/110}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000000240)=""/228}, {&(0x7f0000000340)=""/74}, {&(0x7f0000001d00)=""/219}], 0x1e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000]}, 0x45c) 13:37:34 executing program 4: socketpair$unix(0x1, 0x7, 0x0, 0x0) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) syz_genetlink_get_family_id$tipc(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000580)='en\x00\x00\x00\x00\x00\x00\x00\x7f', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) poll(&(0x7f0000000000), 0x0, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 13:37:34 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) r0 = dup(0xffffffffffffff9c) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000180)=0x5) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) write$P9_RMKDIR(r3, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x34, 0x4, 0x2}}, 0x14) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x3) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r3, r4, &(0x7f0000000140), 0x6) 13:37:35 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x7, &(0x7f00000000c0)={0xb11}, 0x8) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:36 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x104) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2d, 'io'}, {0x2b, 'pids'}, {0x2f, 'io'}]}, 0xe) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:37 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x100, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:38 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:37:39 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002900), 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x400, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x7fffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 1718.230141] INFO: task syz-executor.0:1844 blocked for more than 140 seconds. [ 1718.237434] Not tainted 4.14.105+ #25 [ 1718.242239] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1718.250213] syz-executor.0 D25048 1844 1 0x00000004 [ 1718.255825] Call Trace: [ 1718.258397] ? __schedule+0x91c/0x1f30 [ 1718.262308] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1718.268192] ? __sched_text_start+0x8/0x8 [ 1718.272396] ? lock_downgrade+0x5d0/0x5d0 [ 1718.276537] ? lock_acquire+0x10f/0x380 [ 1718.280558] ? __mutex_lock+0x2c1/0x1430 [ 1718.284640] schedule+0x92/0x1c0 [ 1718.287982] schedule_preempt_disabled+0x13/0x20 [ 1718.292794] __mutex_lock+0x559/0x1430 [ 1718.296689] ? lock_acquire+0x10f/0x380 [ 1718.300683] ? kobj_lookup+0x261/0x410 [ 1718.304565] ? loop_probe+0x73/0x180 [ 1718.308256] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1718.313743] ? lock_downgrade+0x5d0/0x5d0 [ 1718.317886] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 1718.322438] ? __mutex_unlock_slowpath+0x9a/0x7d0 [ 1718.327279] ? loop_probe+0x73/0x180 [ 1718.331015] loop_probe+0x73/0x180 [ 1718.334548] ? loop_lookup+0xc0/0xc0 [ 1718.338235] ? __lock_acquire+0x56a/0x3fa0 [ 1718.342494] kobj_lookup+0x226/0x410 [ 1718.346204] ? loop_lookup+0xc0/0xc0 [ 1718.349956] get_gendisk+0x36/0x240 [ 1718.353620] __blkdev_get+0x345/0xf90 [ 1718.357419] ? __blkdev_put+0x6d0/0x6d0 [ 1718.361424] ? bdget+0x41a/0x4e0 [ 1718.364796] ? lock_downgrade+0x5d0/0x5d0 [ 1718.368927] blkdev_get+0x97/0x8b0 [ 1718.372916] ? bd_acquire+0x149/0x2c0 [ 1718.376723] ? bd_may_claim+0xd0/0xd0 [ 1718.380543] ? lock_downgrade+0x5d0/0x5d0 [ 1718.384685] ? lock_acquire+0x10f/0x380 [ 1718.388634] ? bd_acquire+0x113/0x2c0 [ 1718.392466] blkdev_open+0x1cc/0x250 [ 1718.396179] ? security_file_open+0x88/0x190 [ 1718.400616] do_dentry_open+0x41b/0xd60 [ 1718.404584] ? bd_acquire+0x2c0/0x2c0 [ 1718.408461] vfs_open+0x105/0x230 [ 1718.411958] path_openat+0xb6b/0x2b70 [ 1718.415761] ? path_mountpoint+0x9a0/0x9a0 [ 1718.419974] ? trace_hardirqs_on+0x10/0x10 [ 1718.424241] do_filp_open+0x1a1/0x280 [ 1718.428214] ? may_open_dev+0xe0/0xe0 [ 1718.432047] ? lock_downgrade+0x5d0/0x5d0 [ 1718.436188] ? lock_acquire+0x10f/0x380 [ 1718.440200] ? __alloc_fd+0x3f/0x490 [ 1718.443917] ? _raw_spin_unlock+0x29/0x40 [ 1718.448056] ? __alloc_fd+0x1bf/0x490 [ 1718.451914] do_sys_open+0x2ca/0x590 [ 1718.455624] ? filp_open+0x60/0x60 [ 1718.459146] ? SyS_mkdirat+0x146/0x220 [ 1718.463056] ? _raw_spin_unlock_irq+0x35/0x50 [ 1718.467549] ? do_syscall_64+0x43/0x4b0 [ 1718.471542] ? do_sys_open+0x590/0x590 [ 1718.475423] do_syscall_64+0x19b/0x4b0 [ 1718.479289] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1718.484694] INFO: task syz-executor.4:1853 blocked for more than 140 seconds. [ 1718.491993] Not tainted 4.14.105+ #25 [ 1718.496357] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1718.504866] syz-executor.4 D25160 1853 1 0x00000004 [ 1718.510511] Call Trace: [ 1718.513081] ? __schedule+0x91c/0x1f30 [ 1718.516964] ? __sched_text_start+0x8/0x8 [ 1718.521133] ? lock_downgrade+0x5d0/0x5d0 [ 1718.525288] ? lock_acquire+0x10f/0x380 [ 1718.529239] ? __mutex_lock+0x2c1/0x1430 [ 1718.533324] schedule+0x92/0x1c0 [ 1718.536686] schedule_preempt_disabled+0x13/0x20 [ 1718.541456] __mutex_lock+0x559/0x1430 [ 1718.545347] ? __mutex_lock+0x6aa/0x1430 [ 1718.549407] ? __mutex_unlock_slowpath+0x9a/0x7d0 [ 1718.554270] ? lo_open+0x19/0xb0 [ 1718.557631] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1718.563098] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1718.568539] ? kobject_get_unless_zero+0x27/0x40 [ 1718.573322] ? lock_downgrade+0x5d0/0x5d0 [ 1718.577488] ? refcount_inc_not_zero+0x81/0xe0 [ 1718.582085] ? check_preemption_disabled+0x35/0x1f0 [ 1718.587091] ? loop_unregister_transfer+0x90/0x90 [ 1718.591950] ? lo_open+0x19/0xb0 [ 1718.595308] lo_open+0x19/0xb0 [ 1718.598477] __blkdev_get+0x267/0xf90 [ 1718.602302] ? __blkdev_put+0x6d0/0x6d0 [ 1718.606275] ? fsnotify+0x8b0/0x1150 [ 1718.609968] blkdev_get+0x97/0x8b0 [ 1718.613540] ? bd_acquire+0x171/0x2c0 [ 1718.617344] ? bd_may_claim+0xd0/0xd0 [ 1718.621182] ? lock_downgrade+0x5d0/0x5d0 [ 1718.625325] ? lock_acquire+0x10f/0x380 [ 1718.629276] ? bd_acquire+0x21/0x2c0 [ 1718.633400] blkdev_open+0x1cc/0x250 [ 1718.637101] ? security_file_open+0x88/0x190 [ 1718.641531] do_dentry_open+0x41b/0xd60 [ 1718.645500] ? bd_acquire+0x2c0/0x2c0 [ 1718.649284] vfs_open+0x105/0x230 [ 1718.652816] path_openat+0xb6b/0x2b70 [ 1718.656633] ? path_mountpoint+0x9a0/0x9a0 [ 1718.660899] ? trace_hardirqs_on+0x10/0x10 [ 1718.665134] do_filp_open+0x1a1/0x280 [ 1718.668915] ? may_open_dev+0xe0/0xe0 [ 1718.672763] ? lock_downgrade+0x5d0/0x5d0 [ 1718.676897] ? lock_acquire+0x10f/0x380 [ 1718.680914] ? __alloc_fd+0x3f/0x490 [ 1718.684614] ? _raw_spin_unlock+0x29/0x40 [ 1718.688736] ? __alloc_fd+0x1bf/0x490 [ 1718.692565] do_sys_open+0x2ca/0x590 [ 1718.696260] ? filp_open+0x60/0x60 [ 1718.699778] ? SyS_mkdirat+0x146/0x220 [ 1718.703679] ? _raw_spin_unlock_irq+0x35/0x50 [ 1718.708160] ? do_syscall_64+0x43/0x4b0 [ 1718.712140] ? do_sys_open+0x590/0x590 [ 1718.716012] do_syscall_64+0x19b/0x4b0 [ 1718.719880] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1718.725348] INFO: task syz-executor.5:3152 blocked for more than 140 seconds. [ 1718.732636] Not tainted 4.14.105+ #25 [ 1718.736935] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1718.744909] syz-executor.5 D26672 3152 1845 0x00000004 [ 1718.750544] Call Trace: [ 1718.753141] ? __schedule+0x91c/0x1f30 [ 1718.757022] ? __sched_text_start+0x8/0x8 [ 1718.761724] ? lock_downgrade+0x5d0/0x5d0 [ 1718.765861] ? lock_acquire+0x10f/0x380 [ 1718.769813] ? __mutex_lock+0x2c1/0x1430 [ 1718.773906] schedule+0x92/0x1c0 [ 1718.777277] schedule_preempt_disabled+0x13/0x20 [ 1718.782052] __mutex_lock+0x559/0x1430 [ 1718.785954] ? blkdev_reread_part+0x1b/0x40 [ 1718.790303] ? mark_held_locks+0xa6/0xf0 [ 1718.794360] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1718.799787] ? trace_hardirqs_on_caller+0x37b/0x540 [ 1718.804861] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 1718.809960] ? __wake_up_common_lock+0xe0/0x170 [ 1718.814808] ? blk_mq_unfreeze_queue+0x38/0x70 [ 1718.819399] ? blkdev_reread_part+0x1b/0x40 [ 1718.823748] blkdev_reread_part+0x1b/0x40 [ 1718.827903] loop_reread_partitions+0x72/0x80 [ 1718.832430] loop_clr_fd+0x828/0xac0 [ 1718.836156] lo_ioctl+0x813/0x1970 [ 1718.839690] ? filename_parentat.isra.0+0x3e0/0x3e0 [ 1718.844735] ? loop_clr_fd+0xac0/0xac0 [ 1718.848620] blkdev_ioctl+0x4d9/0x1810 [ 1718.852537] ? blkpg_ioctl+0x910/0x910 [ 1718.856435] block_ioctl+0xd9/0x120 [ 1718.860084] ? blkdev_fallocate+0x3b0/0x3b0 [ 1718.864406] do_vfs_ioctl+0xabe/0x1040 [ 1718.868274] ? selinux_file_ioctl+0x426/0x590 [ 1718.872788] ? selinux_file_ioctl+0x116/0x590 [ 1718.877275] ? ioctl_preallocate+0x1e0/0x1e0 [ 1718.881718] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 1718.887351] ? __fget+0x1ff/0x360 [ 1718.891252] ? lock_downgrade+0x5d0/0x5d0 [ 1718.895383] ? lock_acquire+0x10f/0x380 [ 1718.899335] ? __fget+0x44/0x360 [ 1718.902723] ? check_preemption_disabled+0x35/0x1f0 [ 1718.907746] ? security_file_ioctl+0x7c/0xb0 [ 1718.912192] SyS_ioctl+0x7f/0xb0 [ 1718.915555] ? do_vfs_ioctl+0x1040/0x1040 [ 1718.919680] do_syscall_64+0x19b/0x4b0 [ 1718.924467] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1718.929840] INFO: task syz-executor.5:3171 blocked for more than 140 seconds. [ 1718.937131] Not tainted 4.14.105+ #25 [ 1718.941463] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1718.949407] syz-executor.5 D29152 3171 1845 0x00000004 [ 1718.955125] Call Trace: [ 1718.957736] ? __schedule+0x91c/0x1f30 [ 1718.961668] ? __sched_text_start+0x8/0x8 [ 1718.965816] ? lock_downgrade+0x5d0/0x5d0 [ 1718.969940] ? lock_acquire+0x10f/0x380 [ 1718.973937] ? __mutex_lock+0x2c1/0x1430 [ 1718.977999] schedule+0x92/0x1c0 [ 1718.981392] schedule_preempt_disabled+0x13/0x20 [ 1718.986155] __mutex_lock+0x559/0x1430 [ 1718.990067] ? __mutex_unlock_slowpath+0x9a/0x7d0 [ 1718.994907] ? trace_hardirqs_on+0x10/0x10 [ 1718.999128] ? __blkdev_get+0xf3/0xf90 [ 1719.003060] ? refcount_inc_not_zero+0x81/0xe0 [ 1719.007642] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1719.013194] ? kobject_get_unless_zero+0x27/0x40 [ 1719.017958] ? get_disk+0xd0/0xd0 [ 1719.021903] ? exact_match+0x9/0x20 [ 1719.025519] ? kobj_lookup+0x325/0x410 [ 1719.029383] ? blkdev_ioctl+0x1810/0x1810 [ 1719.033584] ? __blkdev_get+0xf3/0xf90 [ 1719.037477] __blkdev_get+0xf3/0xf90 [ 1719.041221] ? __blkdev_put+0x6d0/0x6d0 [ 1719.045205] ? fsnotify+0x8b0/0x1150 [ 1719.048905] blkdev_get+0x97/0x8b0 [ 1719.052475] ? bd_acquire+0x171/0x2c0 [ 1719.056279] ? bd_may_claim+0xd0/0xd0 [ 1719.060103] ? lock_downgrade+0x5d0/0x5d0 [ 1719.064246] ? lock_acquire+0x10f/0x380 [ 1719.068196] ? bd_acquire+0x21/0x2c0 [ 1719.071947] blkdev_open+0x1cc/0x250 [ 1719.075660] ? security_file_open+0x88/0x190 [ 1719.080117] do_dentry_open+0x41b/0xd60 [ 1719.084089] ? bd_acquire+0x2c0/0x2c0 [ 1719.087872] vfs_open+0x105/0x230 [ 1719.091354] path_openat+0xb6b/0x2b70 [ 1719.095154] ? path_mountpoint+0x9a0/0x9a0 [ 1719.099367] ? trace_hardirqs_on+0x10/0x10 [ 1719.103632] do_filp_open+0x1a1/0x280 [ 1719.107428] ? may_open_dev+0xe0/0xe0 [ 1719.111338] ? lock_downgrade+0x5d0/0x5d0 [ 1719.115483] ? lock_acquire+0x10f/0x380 [ 1719.119435] ? __alloc_fd+0x3f/0x490 [ 1719.123179] ? _raw_spin_unlock+0x29/0x40 [ 1719.127324] ? __alloc_fd+0x1bf/0x490 [ 1719.131156] do_sys_open+0x2ca/0x590 [ 1719.134868] ? filp_open+0x60/0x60 [ 1719.138384] ? fput+0xb/0x140 [ 1719.141520] ? SyS_pwrite64+0xda/0x160 [ 1719.145405] ? fput+0xb/0x140 [ 1719.148490] ? do_syscall_64+0x43/0x4b0 [ 1719.152900] ? do_sys_open+0x590/0x590 [ 1719.156775] do_syscall_64+0x19b/0x4b0 [ 1719.160701] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1719.166069] INFO: task syz-executor.3:3154 blocked for more than 140 seconds. [ 1719.173361] Not tainted 4.14.105+ #25 [ 1719.177684] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1719.185666] syz-executor.3 D27392 3154 1851 0x00000004 [ 1719.191324] Call Trace: [ 1719.193897] ? __schedule+0x91c/0x1f30 [ 1719.197760] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1719.202646] ? __sched_text_start+0x8/0x8 [ 1719.206801] ? lock_downgrade+0x5d0/0x5d0 [ 1719.210973] ? lock_acquire+0x10f/0x380 [ 1719.214943] ? __mutex_lock+0x2c1/0x1430 [ 1719.218987] schedule+0x92/0x1c0 [ 1719.222377] schedule_preempt_disabled+0x13/0x20 [ 1719.227262] __mutex_lock+0x559/0x1430 [ 1719.231252] ? loop_control_ioctl+0x71/0x2e0 [ 1719.235667] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1719.241147] ? __lock_acquire+0x56a/0x3fa0 [ 1719.245390] ? mark_held_locks+0xa6/0xf0 [ 1719.249443] ? trace_hardirqs_on_caller+0x37b/0x540 [ 1719.254483] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1719.259238] ? loop_control_ioctl+0x71/0x2e0 [ 1719.263668] loop_control_ioctl+0x71/0x2e0 [ 1719.268034] ? loop_probe+0x180/0x180 [ 1719.271889] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1719.276654] ? loop_probe+0x180/0x180 [ 1719.280889] do_vfs_ioctl+0xabe/0x1040 [ 1719.284766] ? selinux_file_ioctl+0x426/0x590 [ 1719.289237] ? selinux_file_ioctl+0x116/0x590 [ 1719.293781] ? ioctl_preallocate+0x1e0/0x1e0 [ 1719.298197] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 1719.303850] ? __sanitizer_cov_trace_pc+0x58/0x60 [ 1719.308696] ? nsecs_to_jiffies+0x30/0x30 [ 1719.312971] ? security_file_ioctl+0x7c/0xb0 [ 1719.317382] SyS_ioctl+0x7f/0xb0 [ 1719.320781] ? do_vfs_ioctl+0x1040/0x1040 [ 1719.324912] do_syscall_64+0x19b/0x4b0 [ 1719.328780] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1719.334258] INFO: task syz-executor.1:3155 blocked for more than 140 seconds. [ 1719.341553] Not tainted 4.14.105+ #25 [ 1719.345873] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1719.353934] syz-executor.1 D26520 3155 1843 0x00000004 [ 1719.359566] Call Trace: [ 1719.362185] ? __schedule+0x91c/0x1f30 [ 1719.366074] ? __sched_text_start+0x8/0x8 [ 1719.370257] ? lock_downgrade+0x5d0/0x5d0 [ 1719.374402] ? lock_acquire+0x10f/0x380 [ 1719.378364] ? __mutex_lock+0x2c1/0x1430 [ 1719.382673] schedule+0x92/0x1c0 [ 1719.386038] schedule_preempt_disabled+0x13/0x20 [ 1719.390849] __mutex_lock+0x559/0x1430 [ 1719.394754] ? loop_control_ioctl+0x71/0x2e0 [ 1719.399141] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1719.404619] ? _raw_spin_unlock_irq+0x35/0x50 [ 1719.409111] ? finish_task_switch+0x1e2/0x620 [ 1719.414117] ? __switch_to_asm+0x34/0x70 [ 1719.418195] ? __switch_to_asm+0x40/0x70 [ 1719.422326] ? loop_control_ioctl+0x71/0x2e0 [ 1719.426735] loop_control_ioctl+0x71/0x2e0 [ 1719.430991] ? loop_probe+0x180/0x180 [ 1719.434793] ? loop_probe+0x180/0x180 [ 1719.438576] do_vfs_ioctl+0xabe/0x1040 [ 1719.442489] ? selinux_file_ioctl+0x426/0x590 [ 1719.446977] ? selinux_file_ioctl+0x116/0x590 [ 1719.451512] ? ioctl_preallocate+0x1e0/0x1e0 [ 1719.455918] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 1719.461567] ? _copy_to_user+0x82/0xd0 [ 1719.465454] ? nsecs_to_jiffies+0x30/0x30 [ 1719.469598] ? security_file_ioctl+0x7c/0xb0 [ 1719.474032] SyS_ioctl+0x7f/0xb0 [ 1719.477395] ? do_vfs_ioctl+0x1040/0x1040 [ 1719.481571] do_syscall_64+0x19b/0x4b0 [ 1719.485473] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1719.490937] INFO: task blkid:3153 blocked for more than 140 seconds. [ 1719.497429] Not tainted 4.14.105+ #25 [ 1719.501775] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1719.509736] blkid D28664 3153 299 0x00000004 [ 1719.515402] Call Trace: [ 1719.517995] ? __schedule+0x91c/0x1f30 [ 1719.521911] ? __sched_text_start+0x8/0x8 [ 1719.526054] ? lock_downgrade+0x5d0/0x5d0 [ 1719.530228] ? lock_acquire+0x10f/0x380 [ 1719.534211] ? __mutex_lock+0x2c1/0x1430 [ 1719.538249] schedule+0x92/0x1c0 [ 1719.542094] schedule_preempt_disabled+0x13/0x20 [ 1719.546833] __mutex_lock+0x559/0x1430 [ 1719.550742] ? trace_hardirqs_on+0x10/0x10 [ 1719.554977] ? lo_release+0x78/0x190 [ 1719.558685] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1719.564170] ? lock_downgrade+0x5d0/0x5d0 [ 1719.568312] ? lock_acquire+0x10f/0x380 [ 1719.572304] ? __blkdev_put+0x1cb/0x6d0 [ 1719.576277] ? lo_compat_ioctl+0x130/0x130 [ 1719.580539] ? lo_release+0x78/0x190 [ 1719.584256] lo_release+0x78/0x190 [ 1719.587770] ? lo_compat_ioctl+0x130/0x130 [ 1719.592020] __blkdev_put+0x518/0x6d0 [ 1719.595820] ? bd_set_size+0xb0/0xb0 [ 1719.599521] ? blkdev_put+0x75/0x4c0 [ 1719.603290] ? blkdev_put+0x4c0/0x4c0 [ 1719.607079] blkdev_close+0x86/0xb0 [ 1719.610736] __fput+0x25e/0x700 [ 1719.614012] task_work_run+0x118/0x190 [ 1719.617894] exit_to_usermode_loop+0x13b/0x160 [ 1719.622563] do_syscall_64+0x372/0x4b0 [ 1719.626449] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1719.631856] INFO: task blkid:3158 blocked for more than 140 seconds. [ 1719.638339] Not tainted 4.14.105+ #25 [ 1719.642668] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1719.650680] blkid D27800 3158 300 0x00000004 [ 1719.656310] Call Trace: [ 1719.658875] ? __schedule+0x91c/0x1f30 [ 1719.662807] ? __sched_text_start+0x8/0x8 [ 1719.666952] ? lock_downgrade+0x5d0/0x5d0 [ 1719.671547] ? lock_acquire+0x10f/0x380 [ 1719.675506] ? __mutex_lock+0x2c1/0x1430 [ 1719.679542] schedule+0x92/0x1c0 [ 1719.682923] schedule_preempt_disabled+0x13/0x20 [ 1719.687692] __mutex_lock+0x559/0x1430 [ 1719.691591] ? __mutex_lock+0x6aa/0x1430 [ 1719.695639] ? __mutex_unlock_slowpath+0x9a/0x7d0 [ 1719.700508] ? lo_open+0x19/0xb0 [ 1719.703962] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1719.709407] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1719.714895] ? kobject_get_unless_zero+0x27/0x40 [ 1719.719659] ? get_disk+0xd0/0xd0 [ 1719.723148] ? exact_match+0x9/0x20 [ 1719.726819] ? blkdev_ioctl+0x1810/0x1810 [ 1719.730993] ? loop_unregister_transfer+0x90/0x90 [ 1719.735825] ? lo_open+0x19/0xb0 [ 1719.739166] lo_open+0x19/0xb0 [ 1719.742377] __blkdev_get+0x963/0xf90 [ 1719.746172] ? __blkdev_put+0x6d0/0x6d0 [ 1719.750172] ? fsnotify+0x8b0/0x1150 [ 1719.753877] blkdev_get+0x97/0x8b0 [ 1719.757444] ? bd_acquire+0x171/0x2c0 [ 1719.761264] ? bd_may_claim+0xd0/0xd0 [ 1719.765056] ? lock_downgrade+0x5d0/0x5d0 [ 1719.769174] ? lock_acquire+0x10f/0x380 [ 1719.773164] ? bd_acquire+0x21/0x2c0 [ 1719.776890] blkdev_open+0x1cc/0x250 [ 1719.780622] ? security_file_open+0x88/0x190 [ 1719.785034] do_dentry_open+0x41b/0xd60 [ 1719.788985] ? bd_acquire+0x2c0/0x2c0 [ 1719.792827] vfs_open+0x105/0x230 [ 1719.796282] path_openat+0xb6b/0x2b70 [ 1719.800486] ? path_mountpoint+0x9a0/0x9a0 [ 1719.804710] ? trace_hardirqs_on+0x10/0x10 [ 1719.808925] do_filp_open+0x1a1/0x280 [ 1719.812760] ? may_open_dev+0xe0/0xe0 [ 1719.816565] ? lock_downgrade+0x5d0/0x5d0 [ 1719.820731] ? lock_acquire+0x10f/0x380 [ 1719.824699] ? __alloc_fd+0x3f/0x490 [ 1719.828392] ? _raw_spin_unlock+0x29/0x40 [ 1719.832583] ? __alloc_fd+0x1bf/0x490 [ 1719.836384] do_sys_open+0x2ca/0x590 [ 1719.840125] ? filp_open+0x60/0x60 [ 1719.843664] ? do_syscall_64+0x43/0x4b0 [ 1719.847624] ? do_sys_open+0x590/0x590 [ 1719.851534] do_syscall_64+0x19b/0x4b0 [ 1719.855418] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1719.860829] [ 1719.860829] Showing all locks held in the system: [ 1719.867149] 1 lock held by khungtaskd/23: [ 1719.871384] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a [ 1719.880436] 1 lock held by rsyslogd/1630: [ 1719.884557] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0xa6/0xc0 [ 1719.892822] 2 locks held by getty/1757: [ 1719.896788] #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 [ 1719.905740] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1f7/0x1700 [ 1719.915127] 1 lock held by syz-executor.0/1844: [ 1719.919774] #0: (loop_index_mutex){+.+.}, at: [] loop_probe+0x73/0x180 [ 1719.928244] 2 locks held by syz-executor.4/1853: [ 1719.933020] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0xf3/0xf90 [ 1719.941539] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x19/0xb0 [ 1719.949645] 2 locks held by syz-executor.5/3152: [ 1719.954415] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x83/0x1970 [ 1719.962778] #1: (&bdev->bd_mutex){+.+.}, at: [] blkdev_reread_part+0x1b/0x40 [ 1719.971744] 1 lock held by syz-executor.5/3171: [ 1719.976409] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0xf3/0xf90 [ 1719.984922] 1 lock held by syz-executor.3/3154: [ 1719.989577] #0: (loop_index_mutex){+.+.}, at: [] loop_control_ioctl+0x71/0x2e0 [ 1719.998703] 1 lock held by syz-executor.1/3155: [ 1720.003403] #0: (loop_index_mutex){+.+.}, at: [] loop_control_ioctl+0x71/0x2e0 [ 1720.012686] 3 locks held by blkid/3153: [ 1720.016664] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_put+0xb1/0x6d0 [ 1720.025182] #1: (loop_index_mutex){+.+.}, at: [] lo_release+0x19/0x190 [ 1720.033626] #2: (loop_ctl_mutex#2){+.+.}, at: [] lo_release+0x78/0x190 [ 1720.042093] 2 locks held by blkid/3158: [ 1720.046067] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0xf3/0xf90 [ 1720.054608] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x19/0xb0 [ 1720.062708] [ 1720.064323] ============================================= [ 1720.064323] [ 1720.071532] NMI backtrace for cpu 0 [ 1720.075159] CPU: 0 PID: 23 Comm: khungtaskd Not tainted 4.14.105+ #25 [ 1720.081709] Call Trace: [ 1720.084273] dump_stack+0xb9/0x10e [ 1720.087790] ? irq_force_complete_move+0x2c1/0x2e5 [ 1720.092696] nmi_cpu_backtrace.cold+0x47/0x86 [ 1720.097177] ? irq_force_complete_move.cold+0x7b/0x7b [ 1720.102352] ? nmi_trigger_cpumask_backtrace+0x119/0x147 [ 1720.107792] ? watchdog+0x5d3/0xb60 [ 1720.111394] ? reset_hung_task_detector+0x10/0x10 [ 1720.116235] ? kthread+0x310/0x420 [ 1720.119767] ? kthread_create_on_node+0xf0/0xf0 [ 1720.124411] ? ret_from_fork+0x3a/0x50 [ 1720.128372] Sending NMI from CPU 0 to CPUs 1: [ 1720.133371] NMI backtrace for cpu 1 [ 1720.133376] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.14.105+ #25 [ 1720.133378] task: ffff8881daa6af00 task.stack: ffff8881daa80000 [ 1720.133381] RIP: 0010:__list_del_entry_valid+0xf/0xf1 [ 1720.133383] RSP: 0018:ffff8881dbb07ba8 EFLAGS: 00000046 [ 1720.133388] RAX: dffffc0000000000 RBX: ffff8881dba2a200 RCX: 0000000000000002 [ 1720.133391] RDX: 0000000000000100 RSI: 0000000000000040 RDI: ffff8881d6602fa8 [ 1720.133394] RBP: ffff8881dbb07da8 R08: 0000000000000040 R09: ffff88821fffd048 [ 1720.133397] R10: ffff88821fffd050 R11: 000001916af650d3 R12: ffff8881dba2ac00 [ 1720.133401] R13: dffffc0000000000 R14: ffff8881d6602fa8 R15: ffff8881d6602f00 [ 1720.133404] FS: 0000000000000000(0000) GS:ffff8881dbb00000(0000) knlGS:0000000000000000 [ 1720.133406] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1720.133410] CR2: 00007f9b7595e000 CR3: 00000000b4c26001 CR4: 00000000001606a0 [ 1720.133411] Call Trace: [ 1720.133413] [ 1720.133415] load_balance+0xbe5/0x2a00 [ 1720.133417] ? find_busiest_group+0x3950/0x3950 [ 1720.133420] ? rebalance_domains+0xd1/0xd50 [ 1720.133422] ? check_preemption_disabled+0x35/0x1f0 [ 1720.133424] rebalance_domains+0x785/0xd50 [ 1720.133427] ? pick_next_task_fair+0x2860/0x2860 [ 1720.133429] ? run_rebalance_domains+0x25a/0x8e0 [ 1720.133431] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1720.133434] run_rebalance_domains+0x60f/0x8e0 [ 1720.133436] __do_softirq+0x234/0x9ca [ 1720.133438] ? check_preemption_disabled+0x35/0x1f0 [ 1720.133440] irq_exit+0x114/0x150 [ 1720.133443] reschedule_interrupt+0x84/0x90 [ 1720.133444] [ 1720.133447] RIP: 0010:native_safe_halt+0x2/0x10 [ 1720.133449] RSP: 0018:ffff8881daa87d60 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff02 [ 1720.133454] RAX: 0000000000000007 RBX: ffffffffbac2a508 RCX: 0000000000000000 [ 1720.133457] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881daa6b72c [ 1720.133460] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1720.133463] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1720.133466] R13: 0000000000000000 R14: ffff8881daa6af00 R15: dffffc0000000000 [ 1720.133468] default_idle+0x50/0x390 [ 1720.133470] do_idle+0x2e6/0x390 [ 1720.133473] ? arch_cpu_idle_exit+0x40/0x40 [ 1720.133475] cpu_startup_entry+0xc6/0xd0 [ 1720.133477] ? cpu_in_idle+0x20/0x20 [ 1720.133479] ? trace_hardirqs_on_caller+0x37b/0x540 [ 1720.133482] start_secondary+0x3a8/0x4b0 [ 1720.133484] ? set_cpu_sibling_map+0x1110/0x1110 [ 1720.133486] secondary_startup_64+0xa5/0xb0 [ 1720.133488] Code: 89 f7 48 89 34 24 e8 71 e3 99 ff 48 8b 34 24 eb b8 e9 2d 01 00 00 66 0f 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 41 55 41 54 55 <48> 89 fd 48 83 c7 08 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 98 [ 1720.133978] Kernel panic - not syncing: hung_task: blocked tasks [ 1720.393388] CPU: 0 PID: 23 Comm: khungtaskd Not tainted 4.14.105+ #25 [ 1720.399940] Call Trace: [ 1720.402511] dump_stack+0xb9/0x10e [ 1720.406112] panic+0x1d9/0x3c2 [ 1720.409482] ? add_taint.cold+0x16/0x16 [ 1720.413437] ? irq_force_complete_move.cold+0x7b/0x7b [ 1720.418631] ? ___preempt_schedule+0x16/0x18 [ 1720.423159] watchdog+0x5e4/0xb60 [ 1720.426724] ? reset_hung_task_detector+0x10/0x10 [ 1720.431552] kthread+0x310/0x420 [ 1720.434902] ? kthread_create_on_node+0xf0/0xf0 [ 1720.439551] ret_from_fork+0x3a/0x50 [ 1720.443537] Kernel Offset: 0x37400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 1720.454434] Rebooting in 86400 seconds..