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", 0x1000}, {&(0x7f0000003000)="f3a51d5713dc02468d9ca964c9bd7624df36060660f8c69febff5d8d43af4c7006e068f900b81b97ad80ebaa6f87c23c7d8e70f3463e899d5523fca15ed3e7a00d97fc117894578a2ef8b3520b49833ea0e3a53db14fcf5357613a20a6e4e795fcde17888f0024a76e7b21c6a4288f9b984e994abc8d888ce587aab6ccbd6ec8ae19bb1a08ef94bf8996d0a834933855f7396cb138848fa26b0a11c6603b613ee25ced052c188ad6016abd82a793d1bf329b5c4b47b04596180026e8c97a443a9c", 0xc1}, {&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000004100)="67bd6ef164f8b1fbbfe684a9280f215d262cbe7a1e8e688ec65ead3bf059bc86dc15f2311b25f87d7cf4ec6446e95bb570c165b3e9996bc357a05c90276700f79733cc527e96333675f8e4ac756af82e1254dd26e83e12a38a6b83bb4a9966136a150220a6c4ebfc2f19bdf8c7990bb0e9fac830f36677bf6138e44eec67fd485d8ad9fc49a900653c", 0x89}, {&(0x7f00000041c0)="3e21f780565d76bbb126ad8b5b18db366b1c106fc316028720f064643a3782ee235f9d2aa87daecb3bb9ff6a682b5ab0b58dec79141fb15a2b7d52500f52672470cfe2c408f52bbc9e63fafedfa9448f2f9249f8b0e7fdedc9f87b926fed0501549a7e46a11b7fbbce7a88d7043723cb607d579cede72349c9330c71e796c731ef7d9c85b55ba6c04841e020d2a7b4f3225d2e91b0cba6121f3f583a109a70c27fe5061f5ca7c1af186a7efbeb60ae01a2af5695ac19ca08f87c9d58e87981ce429bc8a579", 0xc5}, {&(0x7f00000042c0)="1f1f1af6f92f249deaa417f2cae1f27c42d4519aec081ee041f5c5b430ab6f747f47776f86143dc99cd1e79e1a", 0x2d}, {&(0x7f0000004300)="d602fbff7baf7289dae2", 0xa}, {&(0x7f0000004340)="ffd1903cfc19712c1b0174f49180b94b3c142111", 0x14}, {&(0x7f0000004380)="70b6c262445a0b07d9be3722a00949bf5cd2609cbe6e66ab2a7699c13ea51b8f9369afa214a7d9bb173aca1e97e77ff92212be3263cbc620950ea3b990966db4301330716d2f895c11c36c5d308db4cb8c9996d252d18a67ee65904e72bc06cf97d481849e7bbeab38dbf916ce2dafd74eab07478a964a30761116d6baceb2a7a556726cc716bcf084743398b6c65df75f86efc8a2bbc1de99334c0f95da64e35b8cdca9a904d56b955f2ddb375bd7b00e181b0fdf82242f62e8f4d626d01adadd7dd84dad0b013d1f895b100baa6217f999440e39fe7ca1c923dc8a9978c4f464737983b3f886575f800d9aa441c5529fd84099f0dbd9609e", 0xf9}, {&(0x7f0000004480)="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", 0x1000}], 0xa, &(0x7f0000005500)=[{0x104, 0x11, 0x10000, "9b1622f5992e79649f3f47ed6f08539ffcb01cfe2c14f454adecd2c4b22420ec7d8f097cfea6e124f18cba414fcf68890ff609bdac222ede55f9f877d3c2bf5d56a5cded5b1b436c325b5f1173c632b9698d91ff823b28c4685c778c4ce6a7c3bca43cea1dfdc9825c47b011e549bd8d16fcc07796ad0884697f20d76d3b3165597ba6050261015b8476646054e31bd4dbf9343530cc2a3c9ffe020ef4bd32606c5b3f0502e97b158b50fdb33a8e4cde9b4985bce1ee6112db56b264ee8c2f7f509fb08a4f299224cb003ef44f2d15320754077b1c3a6773655daf3b25895be569ffcfbf79a876d15d5b463a045d27f68792198ac3ab49b3"}, {0xb0, 0x10c, 0x10001, "99da5ece3df131b3fe49dae3f226410e6d40e0db124a19cefe5eafc16030bb1c551768ab79b73ab00547cf5baf3858ed62e0a2163ccda4b9b9f0551331567d76fb1cc627f3d87b7808a5ac57e8ae1bb82402801295deede9ea84d977d915ee30aee77834ea4fa99f136dd7682ef0bc7e65dd9a253f04830dfa565331351df692c41d35a68e0ac4d246b8997a731509337507ca15538d64f12a652b76a1f7b60d862a"}], 0x1b4}}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f00000056c0)="6880566df02a1212427e894ffc1a5b2dee97c561af2e", 0x16}, {&(0x7f0000005700)="a439e174fbd506e4bced692ca5052289c5bb678672a8c8e00e8a14f7068313a6da96115e92b7d632bc7ea1aafd3f95f62bb8eb4916acfce51efe1a685274b69826b333d58a40c4fc072ad1f6b9a4e2c20a51d1464b1bad68ae706b4d84c6665f20f690a037095d1d3c0df31a58d1d41dbb7feb67831f88d0274755cc027bf9753589d060a3b2973c7d688b98e30be079609602b51913db2db99d476d0ba3b4e79e672052ddcb5df23d23d628f6141a44a33c2521bd145cc4335955f7386cbb2546018cb1f946d2dd63df63273fdba2b4f2fb8b9f868298940615ef1f4002644eb974fd70b39fd7b85c1f940332f639", 0xef}, {&(0x7f0000005800)="5867c9296ffc104412112c152f100c01e697ad2c4077ab25dc5d70a62f9cf728a26095d24242162147e4d2aa07848a213fddebd2fcacfce3660e2c3cb4dfd117360f61a1ac93641deafce903427f7240443c47c9e78b32fd9a64ed0f56a5fa398e8988ef2e512c867a70a743f40b542f1dd185406bda7ee178bf5400e3a1c6945cee4f732fe6792177f3e9174b7d948ddc47adbe24e5f81ecfe8e68d3fa4bfe8e7caccc4f9a4e353eabb6d85a4bbd82ed4f4e6cd1225079c906daf1911f5c77a7a6b6caccabca2fe8406e3126a32ac4eb6dc5b6d19a4938f088e4f26cf9bc75c3e5956b3ffc3337611b9a5b5d7bf", 0xee}, {&(0x7f0000005900)="641bfe8a3e415dfe9e3bf92767cecc0adc5d9d895b91d4f9aaf262a520c1e2d9a711693ddcd4787303cdaa7a0dab3240ea1aba2697cbdd5af954026a4cd29eb6ac256819fbdb90955cee05200f4e9f74cd42dcfc62d772845dc539c2dfcfdb69d43278092cead20d150ffb46c009c13d5e9774b77e5193acc8fcdcfefadedcae8a5e8fd3ea3f96b21f75c9ccbac7bbb58f7a4e217a6592d87e4368a6be38d8f3eea525a5ec651bcb75327f0d77367fd7f3f3aaa442e41387215c9c266658f2be720a90c000ceb54aa3604f47ae0da9751f109435c09572ea1534167831eb581ab274c9ca06c99519dcd8b83026b198", 0xef}, {&(0x7f0000005a00)="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", 0xfc}, {&(0x7f0000005b00)="25a4b04328418803f32435c4b38edf64f820ca365fbbd1429949ed5aed0c6289a50591d3d016797d7a694106662a73b5d58a1c34e06df67a2353e6a741495a8b93727731c6036ee003293f549713c35f05d611c1003eb7c0d13f24971d4c903aed30b0cb0088e9a94e", 0x69}, {&(0x7f0000005b80)="7637c2593cb9fc3e7c1069eccf86bb23a68d286dc5f675262d7c166819fa1f4353a8d0549d3b7e4892e300b1e5a64bb78402", 0x32}, {&(0x7f0000005bc0)="b16fb740fe27461eda784b94d92c61ac779dac7ba1e3698ae98c9cf74fd4dc7d5ed9d18fe229653e7dd617533f431acc997ea3dc176627b0be340940f5d954937459866aec4773512fad1ffd4d71d9d53523218339689bbbb30e225893baf54982f5d3477b8c75a7bcd6f017b836ec8fcb90165ff3b6bb82009b6c438b81d30e9d63ae49e7dc2edebfb0464cab7f6c1a660660881abad9cdc1184eb0dc4a83490b4bb1a7ca", 0xa5}, {&(0x7f0000005c80)="9c84d2005bfbce555e7941c6dfdf4798334ff0ec4e4dc0434317fdaa5c4ac1096c43492fda2d9d27dcaddc8a107dae2f7de30db145403a5068fcd8c7471aabddaf4d8a12c575d02954bdf48e296cd575c1437c2a573f8cc1caacb572028e703ab5675aee683c0a603d3be6e64597fc3dd637c0a9d3175b1fa997af772c7742bddec310e9077841f512b75c3e05997d64c1", 0x91}], 0x9, &(0x7f0000005dc0)=[{0x70, 0x38e, 0xfffffffa, "2c7fd8fdb45c09b79fcb26d09f3992ce7ba71f30a8febe3218090ae929f2341c6c439f529fe880466def34ab5fff0dc63e48d69a6777a82f2f828053e600aa3eae4473a32dc05c0ee120e04f2dc7f2e0a5fc538ca9ae0ca02e285ef6792bd7abfeb8c0ed"}, {0x30, 0x84, 0x7fffffff, "7306a2a1824fe2d36bcef7027eccb246e00d7a77b87c9ee30bf7c730569164d3a2"}], 0xa0}}, {{&(0x7f0000005e80)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x0, 0x1, "f8fd096ffeb415db8fedb74562d38bacf429c260af5e4c84a67fa2293a11083c6fcfefe6a8f509aef76c2c53141be814bfe11847c979026a9d11743d376a38", 0x4}, 0x80, &(0x7f0000006340)=[{&(0x7f0000005f00)="3b8a45d29f713637b17395f9d30c85159c3718fbdca228911717bbaacc9b3e4518549bd18b68481ca4a60239fdceb17a46152f35c84ebec3430788eaa219da60bdebb3b1cd9e58ed648bc148bf543eb207cbde907534ad3e8f3fde9d9ea1c815c91ed6c61249c7543d4ab68a3321212df48c07684c4eb155193af303", 0x7c}, {&(0x7f0000005f80)="ed031d0194390a65d4063a3b8eff9fc1e344bcc35e95aa7da2bb3d13dcd5fd7e39a81a3898addd5bb930bf342583a74421101e43a7c8e853da849557eacf3ba767bbe24c63d844a2a34da40129ddadfb897ad035", 0x54}, {&(0x7f0000006000)="cbccf3a87b5fd41cca06e8ed934cec7d1e638c03baf338a77dbc11f3af5bda8cf5f61703142f13e19e92f55fc70d442ae374bbff2f998d9cacda28f0fc476110acec9f0c61fe35dd6cc251831d5e93d8dffec8d7c18ec127bae8dcc7ccc749ce2527e0b48f09b13fc3c331a25335ce46b27fb1e8471e5ce3d61b13ac8b73035f0414ff5b845a282481bd8a05803a992cd479645fdf172f6d1d6f35f9c6d4844561d15e2674a8be4f8d65cc472bf0e892bca189c499f31017729dc49e84793d683ae8545a213b383d4d0557e8ea84baa38c9d830b6bdbceb5a37b8d35c4e6a44e0c8317273860fd2ea6fde1", 0xeb}, {&(0x7f0000006100)="b1602b9db6ceaf9eaff1aeae095d659c46abaf709a5023cedb238e0903", 0x1d}, {&(0x7f0000006140)="a721f6c39324fe0cc3a8be84b665e197dae4958fe7d63bdeee4e6ce959ee386d1e198cb84ea5d781811c243f177958c417b429978a968f1d50d2fe8065d5e42609c2bf0a3823b3e0a15f187dcb8ef2ed4d7981d50777cf2dbb153cd5d0f187addf90979f294a52a07eef772efc157ba8a381bf3584f33657096c6012a5587f2be53a97b68895545766ad3a1ef5a3005cdcc1bdec901f0aacb36eb335c3d0ca513dcc6206776160727670c9d47bfc7cf43e", 0xb1}, {&(0x7f0000006200)="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", 0xff}, {&(0x7f0000006300)="6a12b13a34fb", 0x6}], 0x7}}, {{&(0x7f0000006380)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x3, 0x3}}, 0x80, &(0x7f0000008540)=[{&(0x7f0000006400)="8ee1467bbc7ad9779a0600655f387f1c913c0170427670bb0f8428e1b5d94dbc28044009719ee31844a2a3504f832f07e194d510cc121860bba25ebcb04b0bc2e9c148bd6b82cf89adbd6f9c62d6a2dd81b9b5ed877df9ed2c30517ae5ba4761820faadefd453f996ad68c3d870123dcb82af2c7605a9b905a555f6ada4d8544089822d8b1c04630bbf01c", 0x8b}, {&(0x7f00000064c0)}, {&(0x7f0000006500)}, {&(0x7f0000006540)="13a0595642222b3b02ec6b7bc68dd6547abffb81a75b99e6e7883a74fc1e8011c5d1de95f236ad5ee7c8a9a3fb9c5e5976ca34e94d513b1a94004f0db791c7fd947f69e110432681853c77a5b7021e8d0ca7e80128693110f177d4ccfa26abfc1f473a7880f6ace45b3fcf8d48d332ea4e4fd7793f302a1f5bad4bd4497a726685692d472acfc9d130b0754c7f97b462d1b4ece085e3ff245eaa17f41328ac52b7adabce90742a1aa0a19bc45d8007ebb4aea38f51117393350f0574a4049eaa67750066551a57d29839060e7fca87839ef4fe1849c7ba3bdf0f26aa17c7e655b1fd1744781ca2972f26a8d05c6ed5c9a783c737982d1b26bbf9aaaa09bb98cad985cb8812238e0c64dc6aeb62c64ae1e0d2278cc6bf2ac9d10342dd6fd6db7ce4227b2404877dfdc31791f4cc735b0cd0329c2af16b87483c0ada7e32ae4f12dcfec7a04e4ebd9af5746bbbebc5698a689c54a2b45e0da6cde7774c2d65a55c08722a058395f8f533b14a5bc3755c5f89e23bf1bf09f94e843d7a61b37e961c7dd884abeacbd13d21f0e30894cf3ec314513d9b9ebacd596845d0d840c252bacce3662714805ace56a8e6081a1c119c83c3ce8fd41c503f04f452b86fb27bff5b80b4b4c4cc6cc502479a9355ea805b2440ec9a6c557fb60b1756984a803acaf90eb00d9d71a970142ccc4eae57d057f394155ce61b6cf21b5e2d8a64327fa2dcbfe483daf6e9cb72c6bb936b5179044da90f794581bff0e206b9eba417b3d25edac054bd18390f831865c4ec19b5d8c223bbe6fb91c505ffe7f4491ebe3bbb666bc3f77f50d66196c24fe316548701d3222f83916bb40a8fab386cb7b0a97d2ac1f396c4e0990f9239623dda03ba1f1c04f3d1601c7bdf7d6e2647794386213068782e276c68e0172de075fd12d70de7b2c1d1fc25e5663d70fd9a995cccd2427e324edfc43b5396e0ea87da5e505f62b5e58e9045914c462a75e02ec51830e3be3b4f858000ac7ed4829a8ca19cca4e33faf3e4eeebc8734e1ce30ec85005c45287176a3527b0678064d530fee30b7fe6ef35f19d96071a2c20e0775baa88059f62a6d111350d93b7238b0b6c1d34507f4e35944e891fda773a60980afbe07a4d0f64939d54582ae91438b62c9a52c65df3091b7753181faac37d8bd36f66d6da6833029d29f42ca8b751b8f488e23e2ea35b259a76915b416c589eaf1f60879faa41a61f7719e6fa969a3202918a4f524eb956efa96b13d516d113b6809e419828f859de1a3ff60e62f2bad4505753cd926a99afb5a4ebf2ac13244c25b30bae53101fb9bfdadba92ce95f02e6356f9721e6acec6b093a0d2c17ed7fbb58d18cba6823883ac5fd918538568b25a2131eaffa587ecf85e9f835361822be1aa2d2dee4bfb62b0cb85656b1b34c8b655602ed26d1378f90f53758a49882b9afefe50d03b64b6cecb000353bfd88f82d4bd42e37c221503a02e670923d876b79b40433130101138c67750b904a1866202067e77bba13535f7080815fb9f1f79461776b907ac5e76845ecf971d55c2a63fbeb374e4e6f8f44535a331c83379664a222b17d510e66e95816d5d8a917b36c099619f0c366105a209fe63bb2e6d5f06410a60bd28fff2c83789a02ebc98e43c2fd7e238a1ee41926eb5781b0f690b6c217c412ba70114b673bd5c268ab4ef9d63a32e47cd4c44f851315e499097f11f6622de6c646fcfd429d4a071ba79fd85cc55e1b849f67b83324d8ff7cdcac550a8b4cd766c15fe6b3ca6e3348f030a5cd64a4db0aa41d697db6f0ef0e801fcde38950ccea0d8b2570dfbf3303e9e11c65d4749e494897b21625e1640116b8dceb8623b4b8c2cece0f8481fc34da51baacaef81801edc986da835919589b1e2b72a87e51b1e2c3bbdfd456b15e9cfd767a50ac5c2e10cc029566cd70cd7fe430025e910860847d23fc76e53f88a06ce7e3f15746ccdb2e406093766de3a5f72eb918fbac8d17be3a4434d89c674d389c4d5719c28326a81ed746f526d55b2f651d2a3081c1b31311c1de3c107539d8cee56672e9ad31026c8dd4937472870cd598807cd804f4edaa491cae48e62b93cf64441c84d570b10fd3596f5ebd9b45e17085beb7fa9ede5ec6961693d4cc3300239df5e6861b664bd95fdd92806ea43b542075c495ca7ff813aa9f4ff2f5b58e640470fcb85616c5329df7acb3be42b3a81f3d9826840d95449c5e37ef26b8cbfb9b817c328748b8c745ba9a1ff3f5f48d8b92b8cf2df982dc31350c66e400742d60ce50894072b8f33878ee34184cec5b875463a89afc7d02cba1caf8c6ac2f043195542ab0be7f096c0923c6f41920ec17045947df6795b66c24c1864ac61895a094b6c0e1762ebbc694918e5ee19a13b9e894876a8eed0bd0b8ca8200bf2b5054797ff051f8666bf5fac0480b9d7bf197e4c4f8131a5b8362ac3d8c26f3166cb1703f3f144f0d4a3057612ebc1bf8df0a4fee13d49d35876e5c5b274cdf07deefa948d5deb8054a1e17c7896483f617e8afb0579867cd86ae22453ece677a768605f2985919050b288e39597207abf092ea3742b45459637da4125352969e79063ac2378e3d41b91d9bda139b7cc3574873e73d926efb823678038a4f98c25932669d5cec967739cd20438c85b2e4fe7e2cb95d1465e298b26c7bd81634b1c1d0269eab404d13a2e42fa3e0b1a298b627e54e17f87fcd048b683efd17aec6cee53005461166421810867c5ca47538c014f24598849c56021177f32d8bd55ceac01516a4546c2454d94086496731c189e25dd9036e74f4dd51348360b4f2816c49ddb0a026547beefad090e38454ac2f675efe56fe4f934222ccbfae67586950f9cdd314bcf3747b7d9431b657b1fc320e706bfbe8ef7ae3872e8c006232695d8ad25de25a04f5a1192394cc4aa300fbf25f0ae686046321ba707564ec426bf00c17bfa7f4c427b2d2db62ae9933072437be356016ec04d7cfb06fa7479c9f614d2ffa03a3dd475a60c9f8712f8aece3cef6fb67dce4a921d81d1338421417e86e7ae50f74da977f8f5e1f3a1ac9ddd1ff684c22b9d591b0011c1ec9997d9d3437a318d65fb04712bf258731f30b3c51619dff33409443734e1cec615d19a3998f647c850a3c8f8f7b00ac0b797831e43e23beb0a1d16feff6a3394cf69636f31f368789c1ed7e60e774fa777ad4df9870a2259007bc0ae812bb56daa99dea4dc31e1fdfcd2d0a59d7b35b1e90016b22388d543da3aafe443447173276820251ab8e60bcf34f5b6fde4776979edd2400414fcb70fcb587574e57b0bac0600fb26c319e1f35944f93791c9f327fe5227540fb2a9444294b950e2e03ae8da112f6cd7f9413191b3722ee973ad32b3db48811fe86926b7064f67ca607c7d8aa0172e9c18f5580e1f0d2b011768640ed04a9d3a5bd9a63cd3d1524a2b272d1b942e40bc1a0da5ffa8faf4bdc30ba455dd4e5a71fe0aa445a337d8bc2b0d6cab5656eb8fffaeccab7cd109491a97113411721c548c290ebedd542fbf7d8c23f2a3a010adccffefeb574541e9984eaef8f4d5dd86d4e7f098ff209c82672122640a3c4c876e937f649d41a6e8f18fb50e25dfe4009b7a37c24301cd1cae1e6f3ecec2b384e32a8aac7fed885bb917e64380be5ae8491cf31e72daca361a82b8a1f4a6ddef2eff2c478a38128de3a350f6c9077116a889d6ec9d6716038cb078ae9351b42130fe787b8a5c82a40e55b608ad32166387b7d0393ffbe517b979c06949a3e5b6ee0e09660127e1a1173526ad8a5f4d2f3a7165ae403ab43267663c8abdd11c1934cb15e8b7f10f086514ba5d9dd79a24122b6c764d15f5fbb847756e5be2214a12384888cb493468433df61b6993364b366d6d174d9a52da7caeb862a29869caa57366b836c65a01b32f28b1dfb396956ff88d38f6575703d621e678dc38501f143ad2f50a2b12f5057651e62920561c8a929cb39bc22375af07515f37bec63bc8ec1e00bb3ab1c7dd55a5f24d12b4ff6ffd47a1ab7f47bbe0888159a2b2b1c350e53bdb04814219dd822ff69b7bb0f0382f7aecf60b63d7fb9e3d2f9ba5396304a56ca7922ae25bb575b09f60c6da89751b29186fdda1042725bdd63dc7fafc7f56fcc5f02dd05c812357a2a95dc8e26dedd951eb861d5cacb33b37a8b11267012ddaaa9777cc7e358f648ea211e0ceb2791dbaa208d3ef435dfedb8cfabf936543bd2ff86c0f69a8fafb50a6ed0209b348ef4ec83313a4e4b0c89632982f4f409e6b8c2468ab7a32d0ad98ad4fd2c5a45bb03a8989007538d03abce0107fb09315f82633eb152a1f8a87b3c726ba4e29c880763ce2d74df26211b83d14a045bb573e0984a51b4e1cc03b62d154035254d7aaeb54dafa2f44015859926db071ef4fd89ee6fd68d00a8f71763f804986ab517e2afba103a94affe63a22d8031f83a794183eacf46557a09c62ff7fa5c4dd3c67afa95f47806a24a48f52244bcda40fb7a8f5e8295a2c0d793e9488a0440962657fa0ca63eadf39d54c59773ce7e19a35539a0e03f0fffdaa043f19c7cae0e81a7811ad8b592eae3df7d0563311cd2af4980734bcd234f9569c1d936e474b358cfd1bdd83b8e3796445049c93e017bcbef076a9d42ada0b5e52f57fb769c0a63cbbb6e8ab02d06f5b6b79c9591790ca34682b98817599f33dc8948a3481dc0f9c353c29e6cd6184f8d3a5e870cc7662415bcf614b1a8be88d8b4b736fe6a3186e7ba3e77f87fcd522de0b3b2eb8c5bb8fd1b1aeecbd4e7cb3281d38f3207a6c88def64e013f01e0f84dae8faf5dc17e5688461e96092f9cd61f6a88e48db2206b3fea6222936ca8ffd411c5ab7eb0fb4d22ea6b2724e61016f1920713abcaeba163184da409d2ad671be1564c0129354d69f0e2d4416d0f3060c80a7775175c773b6f0dd5ff9f3d1d45b9788ccc605d8fbca2f3f930ceef4d9ebebaefb82ce6435465a838d407e2df9454088fed9e480b8d2aec2a14ec3b1c0d92cd8ef1dde11e9a76840680ee1533070407d6c897ab40c4338366d09234fe0d7d5a980b80ae74e6610f77d4c388cebac3441da9d5992f84a14b938fc86cd5afb0a7f2341565b1198ed3162fcb448eb0137ac2a0751ea492e44f51b268aa6dd01dddf0c31475e6195ac224258d8939a3489ce996466282bcca0b6810c98994bf7458cdc92641e4836b2d5c887b415503240aceafe4f039efd4f5b03f63a80bd1282517f0565bd6920dd49a7b264e69b95f5288f2fb938a9860712dae895413969c3adcf7629760390af49c1f3153496348cb1a0b1cab64b5e853632da02b901cb55f3d5a08c7fd391bea846365737eafb2fa7883b7e49f393c8ef264e17111741d044c995ff3b7ac478ed7095eb1876584cfb5608c1344b8988a85068e98197220cbc2b7a0b2136271beec858ec03cce53b07c553685368c1b2de1acde2a24dc5e318b68df62864b6234f476f92ca1ea4c449809f0c46637c3530de03b2997742fdad48346b1ca6b7b8f523221c405e7a966e5918d58de11b1ec37be18cb51ce2d7d2ec5a5e2a7cee6b0d8d995b26d4aa7f525443b779db3f4a637e870f8dc907683f171b8436bddc7547dad149686170c46ededbbe63d9840fa81e8e7e97686f25273036f747270d661b03f9f8191b2264b989e65b92fb657a10dcbbc1772a3ec3d58dc2b87eb4f180af6dfd6a00fb1e260ddfe4545fad794430f7a737c7510a6d6a6337f6957a786e098d502489d02ca691565de9d6da89f1bc044088f224f7ff", 0x1000}, {&(0x7f0000007540)="d035ea3b66e8a14339bddc2eaad983305306eb6566affbb74cc6eeb893368994b89d9ac2453f1f99fadbe78e4de2f29a0eaefa1378c49d0b2153a34a7cb4665eb0f6eecbbd9e3fbf57e20ab8bf6936c2e9775fdeed25ff4771fc1734231727630023f4f2129b10b36d78615123b17045ed567490a8a3091367b522de29a293ab9fc912c970ad6032cffb8e00b393466805cd6502d2916e6477266a3e50d19f26391ff885a65101f62218cbf13ebf8c975e2313c7c4e7279b92441161af404bee05a3c8ae3a429791d012a96beaadd3dcc5567c034c84a6a87e27127d70a61245a2be7f8bc2ebe35b8dd35d4633fc9a1d70a01b828a48f222915ef393da750780d4ed678ad2b3b019751e26b1a8a07517821b93707199c3a4fd3b8932227f7a10b02698a90eace553ee36c21e5f1c7207ddac3163b26b8d37ab121db8d21777f2d588727300e959892498abf046d2bd2893fb7f76740d062941ee041775ebe341e4209e7bcdb67dec4b3ee2523be96b8fb768e4a7d02d68f255bb3d456ada3f666d510c98e0ef139cdd8659e727aa41a0f1034547f94eb113cc473d8badfcc8b285ab851df7f6b38aa4d6a101ada9ea74b41b3a174922328dab3ffaa3c32a1aeac1db117ed5518183c267ee90b303840268e0e21312b9c9a71e9a1a12aa02c858138233f14b2655ef10df98d7eb4f81d0a87b428e34e07a61f3f542836e6332916497ad819e8d41ea3cad80574d635c6212cf52e19aaf6e72909f5ce98736622d96360c1420df962da4f859af400163ce6f5e9fdcda05541c1a40412f89c354699c58249f6c3fbcb2c07c3ec449297461c8b011642f042ae17b498fabb4939d8d5d7d37e65f16513fe71d1daef0f81c3648cf86052ac86dcab239f67689c47d232d512a2ae6efc763ce3d498a275d744d156864855c7efb35ef81d0d69b8e08f296e0cf03e5390e08f5d600fdf5e4bfb129e48a7243f63d2587bb0ac419d50cea98a90d4db259d69f050d911e55346f0741366bb922df64e939e445183347af24cb7aaa52c172eb99a2ac9acea5f16ace2578840583b98bcd167b1ee8a98b75bbf0a101e9df36d79c7abee78043fafa91b4785f7268c629d42e4d0f2f9898526206db7d8d2432403f853a0b47975a122784123a5999c6871455b776ca555247068deee962c8be61e1ef7886752c23e1c409b8daafe75e624d11b30f183951aa484e303ae418e01e9f00a2fa384b2aab20a9f1eea98022ba4e7b70503f2e6b08cc5ce07994b20f1b5c0075585693fbcc5bd05eb4dd9674277275ecf61ba19f4f4ad687db656eb60720ce9a7217a859b69bee16564310eb624ff7faee75e9d825a3d2c85f5728c1e28864690e45ae8465c4527d50de7b1b4c2c5a4253fcf8959add594ece4ca9367b426f93cc6dc274e7a12711c2a4a17285b8e1e03848cb6da3ef7aab967cfb37442fa4b77ccb9293002ad62bb84a0c12c483dc7561abab5de5bc6cc6f634c3e949ec3c1dddc3331d9bba42e8ee8f46eeda5ed99f4db54960b225aab7048680eeb698f4ed8f6219d723f082d07d1e42421f54d732fcf5d85fb5465cb739783d29499efb920b5d7c96b4bd18a111d5938752ae3f5c8c816ead584156b5050f8817505f47d5209041923a772bfcbd5499062c369c41a5e11ae76569b3f4fd211c5227e7eeb4b04045160118fae8ec0a69989783695e4627aa46e7141925fcb659612b496d14a9de6e050f6e7358ce8a20968b95c25adf970a2ca892157da737ce427f1b69a4cd7a596de2af45bed32bcaa56b6ac43f6968fccb677e81f714a7ddb07a7b8ee1dd2d2c8a1fcdd4051dda72395ccbebae7c95a19f7e98d3e4796ba4e2b2c9906d93b7df1b6526f3d880181328d282d18236100ae3416634ed3baf0232877c0b746ef2a7b42fd89d2ebd87400bbccc1312d638ed8e92139183ba5d5419df9a12bfb33ff0d3f16abebb29a13f67fe78eb0ac1a3f5cef8ba98962e3608d3c6d7e94aa423dc81d5dc54910f9ed5102ca516bd9f76e28898c766145e8512fbe81caf23b6d105fbac6e218ea4e5807f9f399bfeccea91f05e504835cc04eb87389726639791515566900508ce7dd814b0a7babd54d74976d26c4fedec80993bf38c0a1bb07393d78778f0ca5a3dabf5b4f40760c06f1aa8b7b937202342e1d2c53a05365711c1b3675594d83a259340ff72757d57c606522ef196345d469b55c2c035faf42a1a0663d11523c3f487f10e0c0ce4698c4c7af8be74c125294f8f6b42169deff885f2846978f791dd2188ea695d44bd39604aa4a98434abb8be843b608490de68ccedb9693f49cec66f189cbb0f746a5e9dd5905e30b5f0ed8b88533a95c9cdf5c090893ba286257524e332a0773600ed838fa67f9458178f8d8ba92092a61fb84d06781b97e432a1c8324fbf4eab198f31ba4209255b07e10fc91d9bcba75b498045ad76f15a0b608b3d3677f4b2e5053fa997bd460b1757942973f77cda4d956a84eefd680c418687c57290ceaffccb5bf9413b6deeeb778fd3dda3a8b8a005851bc1b2a1232b8ddb79562e984c5d0158a8c7817b918e9487bf896d861f5bc5cc16c1a24964bf7ddd27ea851b1492ff56c398784ebd5b9136060c78b1da5fc3f92f293d7d48edefcfbbfa2f817f05ecc4ec7006618c9f6e8d9c03794b3a72e9c4801879afa10e1ef21b50260f00257f074a868c4db8b573a822e22d29a32b497902fb8336b0ce04165e0b24bcccd9d8d802f7be28de3628a7ac5f3d14e529a7a2b26844ad51df579a4a58bc3269de0d47e0190a9e514286bba8cc627f01ea0963222400c44ffd46480e4108a58d4a511778ff450c20901434511520c298d6c2871486eb4e55a9ed68c0ce8ab51c51301e034b5512c79254816fe121b3858101c7076763ca11d36cf72f0c79a175a232f5e46b09e86e27161514117c922fddae57be38cd89490e67a93766432adbf6a53c9e82108f36e558b9d0b3f5a0cc8826d6de3c8943a9fb0787ebfb14d8714a796bb1e8615ea08bcec294f5ff65d990c69f2b4205de9bb232ae8d0e79f6a301783cf372aeae0ce8aa73b5dc8521032b40866a1b9cb011ac3c64b72fef12932f77c371c170445bda1d9481a021c1acc45fca5d6c6fb5b9bb57b19115bd81d11f8af2465cec78590a9edcd6abdc4d11d1abfb004959546d18b29f5864dcd7e96087dff38054b6b53d88cf9c49d7d172820be1a0b3a2cc3295b4f766f18c57c2865a512d931b4465e4377811e16130d5d49e36971ee33a45695b86d12f30cccc14b2bc09108dbed2f3e33514cbd720fdbe2278a35b5d64f4cfb3544b8b052f78351d58ee7b7ed8a1a1a2911c2fe31e7870612a2b9ceb1dd1bd6c1e2b6182a59d97e31f1819a9772f218bda658ea3cc7976cf952c638a84892e664718c38d4bc2dae96f67acbd966d3039f238fa95985269cd8ffd96bc126d8ac5d15e3af799b30381031ee36a590ba3e242702fe0c9715628a6edaf3eb8314ba9d88eb022a1c799894c3b63cdfc542749f3b40a61f8f3bbe40b0bc00c8e8777fcba2cfcbadc7391d8f5818d971109e0c0d481868d7f0233d98ada76b70584ba53e7dbc105a3ab4a5b0ed95fdb81025b3c6057a40672806a290cba72416c23bd7f81d1ce14ca0fe21c7f50a1bd357ccb24035333ae32b7d678d5e00ad5dcbb183cf1771c70656b4ed69b78e9677df5080304696c4e9e063abc31dfdacad3828e0a635fa7e5ff6fa98e647580aeb3b0253edcff4c1407269f5eeb877be4bb4b9b18bae7de2f196eab6cb300364bf9aca0437a589555bd297132a7a7353607a4d5d971597c25708ff8a56c110e25f2f8c543968554dbc322d9da603fa8261454122acd3e85085113ebc2d98f4e0edf43000e3ecd8e16fb328d38b48e414269ae86d6d6022e0004f96cf8d87db96e197631eab196b11ebe07b31743111d3da8be45447803709821ae7af74b4b4bbb13e0a14ed488fc83b2680b15b97b4814953c5a0cce761426d7920b5d6f69a6ea9a76c299552cad1b259cbbdd1cc8aaf52a4d2e6b7c672f0a98923eb56b5635c08b1944e8d83a4eeee3e87730774f1ab59a12a9006af6f6c31125608ceac4fa1e30b8b9071b44c1d8bad40edf268258baf31c0bac100b3019e11cd95b67fc143ab6ae2ed02d86bffe2dd791230f0e5d9a40c85ff48f065ec5cef246ca2023260dd8a84766f6a03c9a9ee1f022d008fd2bf7b064e36ef707f9785a05f9f27ae9205536dfed8f5ce25182c7e380ef3d19d3980daa4727015bdad9d61bfca0614bd7b09ae8790ed198c7536dc7fbf56e39ccdba33c0249ec8d4ad1c189b736267c77494ba088b5a8e33a0977d721e4fb8904ed5e897adc85ab9d4a4bf157511d484568bd854ec1d8d80c1a937616682f75347111737cc552e78a8eb674b05faa5fbbfe0b0d02ec03f5ae0dcb6cc890e20d3a44456d2cc39940f29a2e448509d62b9cb8f64f0a570ffd68447c4e6d465c066742ed373bd8e9598ce89df08d30c73f8d37bf410eff43ba62d0b794ae3b71d1f1f5cfea1f4749f6246a7bad2d9bf876db9048cb645dfb54fccb08af78aafbedfa8f67b2abc69e863b0a4770559751b7b0db1cef40e3bb0c0f1f17b9f0806e5ea56bf14e9ad46d8cfbc02e3497812689137f385025a0bc5719034a08c2a4d598527c857359d28af608574b13340d03942cc4a1e7d3889dc7506dab9be9f7de4c90cb5c766ec63ab1344ef43ab1b1330a6847ed6dc8486a9ba7cfd784a6e5925fb2f4ef935c51efd9dd06878b4f93219d8faba3fc25127670a59242cdb8c27de70879445086065d9b165d87c3b814db9d201ae69442b4bf1df25aa544fd0052eac0d813021d816c35d4fb4fd9bdd6ed47a0de05878d6886057e28a37b0d56dabc6ada652abd762f4e52f50f6d000571325d0b3ab7c35a9638da0ce1ab247cb6ae11ed3948365b53be66212b95993ca41a1db2496ecef08776400f192796d7f00caacce6c8ff4c13d4ee2bf97320ec94a8145399c17b20936cb9d2525243a5dfc1c9dbdf2ce02bfe82250c4a1529e5cae371fac4eb6afa0f2595e9486de43d0a2f8bdc288555ca909640ab72a48d63e0fea2c6ab4a06caa88c33fc317529eeca06a276f23594c9a445747debd42508306a0f4cdc68a12de9b72d4acd8381bdcdee7932e8a64611a0c141671bf904de3ef431541acd052ee997a58d34a9a8b49ddf8b7fa46170c7605d673e4cfc951a4997527d5e61c4f659794f67726541ed4c22b9b251814cdf4f1094359d54dab7b596bb75e86817c16bde5b1e61d8fde212ab77a378667a5d9a88d3085066b4faa75267073d44a04558bc02e26f99dbf6420c5c0bea8547b849145fdd00a6585d177e446a0df5c8420776a5a6bfa8af92be869de33eb909c517b8d634807fee3c1cba5112a7438adb80fb4d2ebbc2bf24d3c572d8ad70b208804a2fdc599d0536f4ba0aa8cb696811d79fb658646324fbc2856a9315461e7356a44d6130c8f64f78de86dac617d65121bd49bf86ad78faa182e795c0363b2c24f10e785e02908552f9b21a19bb2ee3d9f12eed0205f0e22bcfc08eca899340df1ee59ac8e55adbbe062779ec6caadb62072d3fc2f3e1287afc8b4110bab2b4d0377fd6f3c1f9638bdbcd5caf7794c34ff5a2d6035517589fbe10ffc56f6e745c813be3e11aecd98033c65e37ba1b3a7a8ce3784c4d6706e5682b7a0a5ac60d7a2db752bb2d6fc93de3ea619278edcdbdc83c02590dfd32198158a994cb6cf7915a6bb413bfad20c41b91", 0x1000}], 0x5, &(0x7f0000008580)=[{0xf8, 0x108, 0x6, "2ea78b5bdd9ede9ae61c79c455ff643ff178bc477c603a7ec15a4804ef74f5429f87f170cbb67ce6c5cab0cb854fb9a4d6d904559166b2e010779fb3746ed51141b96507a743d4d347c993d4af9343dd127dab812a304a51b9db56e6423f9bb4ded6db9f6f86be7a199ca1919068d1e1cd956bd8d0543ccd121a170ff1d425e2607c19af80364e20d7851813e7fc1193894868aab2e89b6bfd814d59747fc652050eb502f5893484915cbecf0734554dd0122acccb9d580b010f708c89ce89b90bb26bbfa7827b98e1cb3074e268b09e37e58adcce512086ca9429b7fd1bbcebf7963ce3df573dde51feda"}, {0xb8, 0x113, 0x1, "8cd7d5ec78cd8d11a2c0cc3bbe093e1560ae29d1f9151e95a0a4f75336e5cffc23f79a9dc98c12a04b42719bfc62418f34aa4edd9f5aef5c4d8b73870995e7380dbef38c6b8a587a170e3f41ba18bd5f577e6ab744f71fa1b18b8f625360a99282c4cf2176855694d4660850eb2b1b3332b195819535f3eb783356bf86a24508815d5e31710104b58c2b564b61abb2f644abe11a744bdf06414c03683b433185d2580b69960bc68ce29d94"}, {0xf4, 0x56, 0xff800000, "658d90e0849fd86983e482c5218e24560be2ad2a79f6458e83215705a188ebb061a697b85345b378a2a732802701306e8c6471d9d4bbb08120e95910d05ae779ea22f39399f5c45950da3b0c4a4663859b850c23cd413f96099e2452ef84ba826989265bfd8fdb2e5df2738be0f868ec8f670dcc309e6153309f185e407f4a069adc29d019561ad1ff566f2f6f259d1b469db937edaf3e48701dabec9b3ada56f91357810c32a77c6db172efc9992568e1bbd2ddb1f76dfc85672328e23d86546e3002304fb63c18a925bb58b928c04edb528dbcce42ea745aa59fd5fd6bba59d0c0af11259f33"}], 0x2a4}}, {{&(0x7f0000008840)=@xdp={0x2c, 0x0, r6, 0x20}, 0x80, &(0x7f0000008c00)=[{&(0x7f00000088c0)="6db26d3a1ecadf994becb3696966c6b350e5412364fa7b29ddfad559c06bacc3bef32e22413a05b85826c542abbf84a760e889b6dd934118cbc381ad3ab0dbaa3a3e87a0f17c0199c54ea502131480a6d3fff422c86dd1098ab953626e6a712f1c10c97a91b00df49afbfda7bd898e53332cc7e4975efb86a45aed326120bf1941229e1769bc506179af2010fdcbeaa76f86759318926db4c01b6b5889", 0x9d}, {&(0x7f0000008980)="08234bc1b989ba0edc168a34fbe21e52ab6b7510a21e19b565552bc61dffcd4f62d07b0caf61933dc4bb7fc6ca5bca6cf5cfe044380b919508d6a8656d9dbb41188b13706af592a45a7ecec63615bf845953cc9ba0ba45db688b8787b4f9448bf96b04e689802fa76b49b71a", 0x6c}, {&(0x7f0000008a00)="398e546b83fb862c2047a913bd1c7850cd53ccbc429e757f5e816bd797e8f597170f81f26f6a24aba51ea25ba39fb77aaf68ecced5a7aa1414b9976a28786246f266a538170d76e45c798494975f40d3f461102c6814ce222def8eb99b176490b57da5b4f1ebf436c942e5bea4c067b8a27b11d5d2aa49403d245686a70044573771cd647ea5b879682ff7775ff5fb92972b0b61cec9918aa80c30939354c44b6914917bcd2db117cb59e800ac886034e92b29af787d89a5fe50b78bf9cf0f4bb34fdaf6ccbd7ebb40d4d7a317f77714a1f760136bd8626ae6b30685de5b6e5edae19e529fd7672d02de86790a92", 0xee}, {&(0x7f0000008b00)="c0f4a25395138b1e3d5643d8565feeea91e9c81752b6ec5318180f383dcd931d077878b064110a0717f767e74f079f8f5d9343e23cf79a281bb87b3fcd79b0beb9b89e6d2fbfb29d1ac5d4f664349c78a3cc648043c6250dfff279c097aeffb4a5d3e057e2ed0f2f482cedfdfd25f423daa23491628ff70027c4e77a07c4274fa8abc7f62bf0ac8fef07286963440f198a04c8b366eb", 0x96}, {&(0x7f0000008bc0)="a5", 0x1}], 0x5, &(0x7f0000008c40)=[{0x60, 0x84, 0x1, "3fb6d4f98b7376a265971f2d293c9a9a15615f9301fec6f3677ade0b0c7e3ba6b2c6568fbe3617b36815f20e47d7791049583ee9ec198f298cd5edf15f880ee035f0f4e7a0e2e11f83276cf32cfd46162b"}, {0x18, 0x4878448a3351b3e4, 0x4, "299175091868bb75edb0d8"}, {0x104, 0x2e7, 0x7f, "a613dec05dd5840a49b81b7103aed8cf9bf4a7ea7fb1548dfe091285543e28749a1a28a14c89f0a9bf96e3a7b3ed01726e9157b60c0d7c86e88e081057dbdd0e0e56d95bea0a764ef247f096e5d306e2ee796bfe5cd06f9edc37d09b1b321ad796cb324aaac721def4770559da6f5d7b001ba36bce7c239fcf5537ae117bcbde03cbc44a6c59cc476a0376c38842f85ec88aa31bfbab658e7b710d2ecff700b504e89884fa4f25eeb92e79eac5b99118b635a0dee6ea3070c69b5a3a6b96180276102c6854dd9c75794b8e893abdbd88ee235c95b2b3d3d5c4eff778fa8ebd415ccef1191444d52199030ab2af82cf17ad19a8ff62ec"}, {0xc0, 0x88d7822bd3ef895a, 0xb2, "afd652a8a931e90152941327dd5a19649eb943e3e42a566e10db1505d1797b21f511388924befdb4d8e952b392d8716b79a3e8df94517fabbf06a4edc687aa66ef49da10a3ef0680c1bcece716254e4143391116de50da347921caa00a0932e73e2a49205d95ef6f084bf1cc75b09107410ffbbd5697446ada1d368288ff0e1d2b662b225374281706f368da0e4bf8b1486a7fc06a44a5aa54ebd1f05ef04e8b95026f8ddd231dd424fbe7ad44f3f0c0ee5d"}, {0x100, 0x0, 0x9, "24b8dba49f3ec71f023c95c890653d6a422de426f3c8533edb106bbcb37758589d5083f096b07ac63d3fce038578c964f3232481d74a5b898aaff618f986fbdf61065892eb7b7b99afadeb1d1061c1d86a17bd705392b8712cd19edd2e50da2a53df79797328141f49e257b67a3a6c8a0feae23696e2c2116927f502fa4a981ca406418ecc51c896304e5d742438ec989ed51f89418352159990d6c2317eb292faf4e5ab16c8445acef9c1dee252f06695b1f4b19993b747296f1a43ae30c08ce79d52dd9031b9bb53393ff757dc90a413dfb61a2aa8ec13b15b8580f2e3027631e8a7e2bcbeb871075bdb8b7d5acdc069caee"}, {0xe0, 0x6, 0xff, "7d79763e9b870f3b88ac0d9d0eb1fba7a50fc824a920c3de967439eba6435b4440350678507fbf0fbd4151d4f3feacd520e3416b7e9bfc3ff6384a6d9dfa862dcd4c8ba71fd1fd3914b80399bbd18a9eb11401e53e7d1cec423509e757b4286338e8967f114def0831bcbb5bd99aebd8c94daf752c2d47fed90e415b5244377bc8590103f77a6c035c1473d9a584c96145364d05a47b3c749f945cff36271b6d13602788cf5f932bfb468292285745a590ec145983645aab29852467d2b9f758c2df11d2e9c3d11cdc062724f22c00e45365"}, {0xc, 0x11, 0x7}], 0x428}}, {{&(0x7f0000009080)=@nfc_llcp={0x27, 0x0, 0x2, 0x3, 0x20, 0x2, "d7ca9bb22dd5a425ffe0b31dc784f80b472d0a7e7faa83cd9220f077782ce77e2fa41de5500f4ce6310b9d51f199ac36538c2eb8c0bafe807a02e7fb29ded0", 0x33}, 0x80, &(0x7f00000092c0)=[{&(0x7f0000009100)="9299e23372c03c4b967c65324159ec4538e7767ec36aefa5857d443cef7eca", 0x1f}, {&(0x7f0000009140)="f193a566ccbd73daa12ee34227770e50f2447619d0a00bdda70e3b18dd44e0ca0e9b6fec7e83da42d5f68e0b0b8cd32b7fa8c24b8edff120f7d6234d80790f97e9f4d82b1d97db61180557cce55fc0783270f86f668eccac7879f40bdddbe10c268267acc24769cb86e28503fc291e3dc51d8859a7e7d61d4910419b6a470937ea94682d4c478729b61a5220d9790ec5ef71c60d812b3fb36028a38f84c172a79dae9089be4d4bc08dec4f6efbf7cbf84484f2e57fe80eb1643e20cb5f", 0xbd}, {&(0x7f0000009200)="bc8c920f5b380ff8fc5f978d901d44d59c23683b3411747f737087d6de727984ab9105ffffdd270722574dcbd88f25d06b5fade9ffd7d3a5b8eedf4ff6faf7338e1b8d8c8e99c6485bdbb029697016d30231c9ac", 0x54}, {&(0x7f0000009280)="33e95f7034171b75bb261227b7854f3c081c9d4686857b3f66f8dbe8fa939d54d87beaaf91a5c75d5dca31bdc431cc5c0d0d390b2d35d72e38fa22dc", 0x3c}], 0x4, &(0x7f0000009300)=[{0xb4, 0x0, 0x8215, "e492bb13aa518836662f201988efdb69b0b9c2d6cfe2f7f9dca1aee79e0a53d65f4b621291e9a49e9ba06f25a5fdf48fb61ba61b55b261d5b202d0546a805edb67058f995f89aec8f7567b69ff608da15ca8101ddd69f27692ee24ccdd98ea4aef4b6988c2b14af3b05ee6cc1e14b95056019c14b28c624e6ad85a22a0b5bfe7651f2d42550a336a66331fc17f835ba0b12cb2cc2c213801e9a0131edcb38cb7677e8256724a0ed0"}, {0x20, 0xb9be44b1ed90671c, 0x6, "2e8de64e7b5b0ac20a55bdf7649fd83bb364"}, {0x94, 0x117, 0x40, "d0479139b89ca51714219a6a9c2546291ab90abd449bd7ddaed4dc8e9bad6ab649a14afcb8d600ac951fcba088a92c1e0986fa4d8dea8a360eecf0c7148e48f06f6321e669657b46f92eb5f7db59ec8bfb98cc5ded0385afcd2d906156e1b5506b59e9b5362518aa3758197d291227927dbf21ad7f4635737b02c463efc46933b1081353958ba4"}, {0xc, 0x107, 0x1ff}], 0x174}}, {{&(0x7f0000009480)=@vsock={0x28, 0x0, 0x3499, @host}, 0x80, &(0x7f0000009800)=[{&(0x7f0000009500)}, {&(0x7f0000009540)="789d4a9467c34012a4d28e6af89ab72bd8dabd6f100c1aedfded3fb87c9033f9b59958a3ce990c9f7630e69593166db896c3e36b44ce1ce281d7a572c51a776bbf30a7e67291f108d91f4cab3b3a40c9aac4a5d75c5a2236ab8ef29edf05902bcbe8808147539bfc1acfd2a7e90c3a96ce103df0691a2a4631fea57cfa26214716809751954c67c76852f3e56a82a40500f134fe187f9add84f98c01686defe0baadf10a9df26ff6406377837bef92cae30d975f4d2687ad125e7893f4e36bfc46e3327bf6ecd441", 0xc8}, {&(0x7f0000009640)="09e4c0a6042f1fccfe820bd45624475c5a9b8afbbac4f2eb90c7d0bd09ac9b4279f85c4a904e98caf43d3c51dd94d8fa9b3da3e855aae03ace5516f8203efa80068fda603e99cd08caf2422a46a23e311818c1910da641da1dfdb268c2fe1bcaa9abf223211e8276f08d18895709fef398df86c7cb9e62e1f82494241d7f968931d514854fc6e2d15ca559f611361b7456dea5a073e96b442832fd0b4fe978bb14d6e0ee313feac4340dffba1a7f70411db6b9d3a9bdaec2fcb0148b08ef432d326249a17d51d98aec0f8cb1079fa3055747c2b2e5ff46498f22720321adcc8ac5b9041307f4dc", 0xe7}, {&(0x7f0000009740)="c2399911fa6d34c717c76f79b7e925fafb903ef7b3a8754bcbe4189165afd2049f18f34b92583496ce4add131b1094131054c5c6876943c3000542b4f3a7e36b20bd480544689f66fbe1f95d7b292b4b1ef1a248edc1b0d262bb938d03f9b8f7673d8a9dfd1b2d85d610d3ba9c916bbab6ab5ef8ab5185ada4656a71482d412a4d9c2e35951b2d169a92d44c076cdce21e4a4fc0bc96f8e595c281616ec3673a292b0249d3c58f", 0xa7}], 0x4, &(0x7f0000009840)=[{0xf0, 0x111, 0x6, "c5856df095d1794ea6db54344deb093d283137a40adaa3cb978d93cd1a9e314b6505d43424726a6ca11a06cacdf70de094b6f34dd9b460aef8c0fd7e01958a27eb4f4192888b5da9a41da5e945a9afafa06b69ca4a2fdef0755d8faf43bf5368e3a2574102ae9680b6a7533f2442c13d9d2fa39b6d12fb9829b7441f6c6781453e78c2b63ad44acf471a2813adeed9be5289d1b0b3e1c0f0a6fd44d5da17feac7cc8e38ff9c5c407f4da7652d3cc0400c180b6943d5f0277c07ff0a4cca949e8840600ed2cda40f2879a13768f0dcfa55505ed10a95f2a5c5cd8f411e85748ca780e1489"}, {0xa8, 0x3f8, 0xfffffc01, "3d187e324a6afcc9d9556a3e5075cbf5db687b4b2d0fda16dd9e2e81a378ba28c3d9079d0fe92407d2dd29c72bf82641881aac5771a82f3efee55bfbef10cc4e9a3e9befeb77a36ac68c07d2297b427f5565577512cca59b422de633fb75c8eecc4fa3f59592276bb4414ab97b6fc8b5a96b8e6a5d3ec4a901581014ac6c4443b35867cb2d31056acf91ec3cea63d42315c6d1d07306244b96c08569"}, {0xa8, 0x108, 0x2, "a5491742d5c4bad69d3803a5060f7428f819b18ffb56693e7cf11ad572e211c3b7a936cc817855f1682793838fbcbff4dc40b99ccf3709ed5c021bad24cb54d3570e98c9ed15eb141d03404415cf315c8d3218740f6b5a875c964247c70bd544cce86b2a36576278705b54347fbbbce76718f65f2b7a110b115c60951f26a925ba2c9c8b4293ec14c0e86aee26a3cc457e4035e877bc9c7800921e6a"}, {0x8c, 0x110, 0x7, "517f90b5d468c7f2344a68f9a49ee4d0168cb8b8764cc310f6912a0932c3b8ac4a1ba443019c8efed2bb59a2594c245d4606564877852d9ba9a4ca7e357c827f190e5e4a7e255ed90ec6bc5e1d6ba19c985c952094c7665a9af2748d284810c6c978adbec08244c57e3c10b3e28c05a2ab4bfac7b3e8c662dc0c9b70f3"}, {0xc0, 0x104, 0x4, "a44e60e74dd1399473ee1a1f6bb2eff63e053254036fd7a482d935772b2f5a13a41325e0df497ccfd5dbba1b48161f2ccdddd85516a76ed530627c370d941a930fd6054d9fff67955ad938ef4bf8002805a46c6d18e48b05ba0492ac70d7242cf64f7abf19ac34a1be487199dc7cd77dec96be8d54bf49a29d098ffc3b379e35d5cdedbc99d2b26589dfedbda83407b331effd24bd63e3ef599b0b682133c179d3eb0c6fc937b467306773df7d4a9eac7722da8d"}, {0x100, 0x110, 0x7, "cef7d6cbe8a2b0d9316c934c67a89de56d10d57d788c4866f0941dde18b2fa7709d933ff3635a1735c44868fb845fd61b518d6ede9f152fd9b08746b60f466561d460427850ef481073e16302da97cac2628e5aab930793a0e24f8481130e53c8263fd6251c81588d9f77812f10cb4c64529af495c3d23b50d37a57214bec04f259355c5f78ae512fed714ac53960d7f772b57c7803c192178bd86c200cb72dbb5c01de1e5250ae81c95f31707ad5995a279ff4e5d138807c120b5db4cb2def14b08d979c9d601632aa429f9a0d24303427479a2b659e6d02a14ddf93a41f127efc39b9807f483e9def5fa6bf86bfd405a6b9e8d"}, {0xec, 0x118, 0x2, "cda4ee6bf2f6620f76ae88bdf01d15a7faa9eb742a3a901f862af6aebd13dc1d7d06ad5f4420e57231e64ac1aaa997d028463b1acfc52a3f68652c088ea133fb469aefb4ea91468c4a9e22f84f7bc2a96bec84b9efa9f1044471048757248e7727a10bff36ac66184ee4dcaabd54dd32c4aca3ddfef0d6def15d999fc0f1c0b0cd370a0ba8eb5a0f1fafbbb0e2f06ddc71a81588706261677d77bceac109d098f107341c7ab8aecd0d53b5ebaba1e26c7d62d2f3c64f36e895e18c9e6e298e32dcb4a8468d242f3d5c05d697fc70f694c8fd1e18e6b2cfe07e6f385a06"}, {0x68, 0x110, 0x1, "4e6684ee16e9863af250f468070620d90fee99f98c176943226c50ba194d315430ac89e9ed892b59a522da02b183b7cfbf5025c77f1951df98dec14118f62af13990808dabd0845184b9de4e4245a3d614d5a45cb611b804ea"}, {0x68, 0x29, 0x0, "700180b146e54667d6c51f7d586b16407cd80b329d3ae45a84d74ba1dd75de97d3becd2b5d94b2e17caf39ae7e3e79f989d507d8aacd86d6dd352678524da11f2e7836bd12824fe1f992ddad0dbbb8301c43e5d4328fee1aaff67055"}, {0x28, 0x111, 0x53, "c734e927071c77ad34bdd1c7a900c6d05617184b706ed804b160"}], 0x670}}], 0xa, 0x20000000) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, r7) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000000000)={0xb8, 0xd, 0xb0c, 0x10000, "4de39867ad9c5de2a889cf80f194363017e9625f34a0ab042b1b9d2addf8d4ce"}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r11 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r12, r11) ioctl$VIDIOC_DQBUF(r7, 0xc0445611, &(0x7f0000000180)={0x101, 0x17, 0x4, 0x2, {r9, r10/1000+10000}, {0x4, 0x0, 0xff, 0x2, 0x40, 0x8, 'uxB['}, 0x8000, 0x1, @fd=r12, 0x4}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:21 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0xe}}, 0x20}}, 0x0) 14:05:21 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 14:05:21 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x128}, 0x20020045) 14:05:21 executing program 2: r0 = semget$private(0x0, 0x1, 0x8) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/169) r1 = socket$inet(0x2, 0x2000080001, 0x84) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r5, r4) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f0000000440)={0xc, {0x8, 0x2, 0x8, 0x6}}) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r10 = gettid() waitid(0x83b895581628fca4, r10, &(0x7f0000000040), 0x1000000, &(0x7f0000000480)) sendmsg$key(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r9, @ANYRESDEC=r10]], 0xfffffffffffffe56}}, 0x20004850) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000500)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000100)={0x2, 0xffffffffffffff1a, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @mcast2, 0x13}, r11}}, 0xfffffffffffffff1) dup2(r3, r2) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000040)={0x1, 0x86, &(0x7f00000002c0)="b4b4d568e0e51295199163afba7be9825d3aa22422231eb1f56968054fc720d3c1a79662dd6e4fd304cc90e72eed18206ee1619df7adebfce1ad969abea6ed2982c90ff8f50afd929760196520428803eca50c22ad2cf604b51d25599e1759f83b5bbc113ca322e0bdd46ed1004b40daca748a5b74f643ea4687e9696ebeba257d87fc76caa4"}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1}, 0x20020045) 14:05:21 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:21 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x12c}, 0x20020045) 14:05:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0xf}}, 0x20}}, 0x0) [ 465.429041][T28148] bridge0: port 3(gretap0) entered blocking state 14:05:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x0) keyctl$chown(0x4, r2, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) [ 465.511612][T28148] bridge0: port 3(gretap0) entered disabled state [ 465.544162][T28148] device gretap0 entered promiscuous mode [ 465.550443][T28148] bridge0: port 3(gretap0) entered blocking state 14:05:21 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x138}, 0x20020045) [ 465.556986][T28148] bridge0: port 3(gretap0) entered forwarding state 14:05:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$inet(0x2, 0xa, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:21 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x10}}, 0x20}}, 0x0) 14:05:21 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x10001, {{0xa, 0x4e20, 0x1ff, @local, 0xffff}}, {{0xa, 0x4f22, 0x10000, @loopback, 0x1}}}, 0x104) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1}, 0x20020045) 14:05:21 executing program 0: r0 = semget$private(0x0, 0x1, 0x8) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/169) r1 = socket$inet(0x2, 0x2000080001, 0x84) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r5, r4) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f0000000440)={0xc, {0x8, 0x2, 0x8, 0x6}}) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r10 = gettid() waitid(0x83b895581628fca4, r10, &(0x7f0000000040), 0x1000000, &(0x7f0000000480)) sendmsg$key(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r9, @ANYRESDEC=r10]], 0xfffffffffffffe56}}, 0x20004850) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000500)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000100)={0x2, 0xffffffffffffff1a, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @mcast2, 0x13}, r11}}, 0xfffffffffffffff1) dup2(r3, r2) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000040)={0x1, 0x86, &(0x7f00000002c0)="b4b4d568e0e51295199163afba7be9825d3aa22422231eb1f56968054fc720d3c1a79662dd6e4fd304cc90e72eed18206ee1619df7adebfce1ad969abea6ed2982c90ff8f50afd929760196520428803eca50c22ad2cf604b51d25599e1759f83b5bbc113ca322e0bdd46ed1004b40daca748a5b74f643ea4687e9696ebeba257d87fc76caa4"}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1}, 0x20020045) 14:05:21 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x1f4}, 0x20020045) 14:05:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x60}}, 0x20}}, 0x0) 14:05:21 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) [ 465.981100][T28203] bridge0: port 3(gretap0) entered blocking state [ 466.000711][T28203] bridge0: port 3(gretap0) entered disabled state [ 466.041760][T28203] device gretap0 entered promiscuous mode [ 466.050750][T28203] bridge0: port 3(gretap0) entered blocking state [ 466.057392][T28203] bridge0: port 3(gretap0) entered forwarding state 14:05:22 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x300}, 0x20020045) 14:05:22 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0x5, 0x1, 0xc8b, 0x7}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x80) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1}, 0x20020045) 14:05:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) 14:05:22 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:22 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x6) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000280)={0x1, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r2, r1) fsetxattr$security_evm(r2, &(0x7f0000000200)='security.evm\x00', &(0x7f0000000240)=@md5={0x1, "5aab6f1d25aa0a158ef76e42ce40fa3c"}, 0x11, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000540)={0x5000, 0x0, 0x1, 0x89, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@random={'trusted.', '/vboxnet0\x00'}, &(0x7f0000000180)=""/126, 0x7e) 14:05:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x2}}, 0x20}}, 0x0) 14:05:22 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x3e8}, 0x20020045) [ 466.438321][T28234] input: syz0 as /devices/virtual/input/input14 14:05:22 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x3}}, 0x20}}, 0x0) 14:05:22 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x3ec}, 0x20020045) 14:05:22 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r3, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x2}, &(0x7f0000000340)=0x88) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f00000003c0)='/dev/dmmidi#\x00', 0xfff, 0x400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x8}, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r6, r5) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) r7 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='g', 0x524, 0xfffffffffffffffb) keyctl$revoke(0x3, r7) r8 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, r7, r8) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0xc2180, 0x0) getsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:22 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) [ 466.738041][T28225] input: syz0 as /devices/virtual/input/input15 [ 466.833702][T28263] sctp: [Deprecated]: syz-executor.5 (pid 28263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 466.833702][T28263] Use struct sctp_sack_info instead 14:05:22 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x3f0}, 0x20020045) 14:05:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x4}}, 0x20}}, 0x0) 14:05:22 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@dev, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe8) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000440)={@empty, 0x0}, &(0x7f0000000480)=0x14) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@ll={0x11, 0x7, r3, 0x1, 0x90}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000040)="95", 0x1}], 0x1, 0x0, 0x25e}, 0x800) 14:05:22 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:23 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:23 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x3f1}, 0x20020045) 14:05:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x6}}, 0x20}}, 0x0) [ 467.088695][T28284] sctp: [Deprecated]: syz-executor.5 (pid 28284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.088695][T28284] Use struct sctp_sack_info instead 14:05:23 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0x5, 0x1, 0xc8b, 0x7}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x80) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1}, 0x20020045) 14:05:23 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x3f2}, 0x20020045) 14:05:23 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0xa}}, 0x20}}, 0x0) 14:05:23 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:23 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x1ff, 0x1400) write$FUSE_STATFS(r1, &(0x7f00000001c0)={0x60, 0x0, 0x6, {{0x8, 0x10000, 0x91, 0x1, 0x7fffffff, 0x0, 0x3, 0x590000}}}, 0x60) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xa00, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140), 0x4) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:23 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x3f3}, 0x20020045) [ 467.585012][T28327] input: syz0 as /devices/virtual/input/input16 14:05:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0xc}}, 0x20}}, 0x0) 14:05:23 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x3f4}, 0x20020045) 14:05:23 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x5d) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) shmget(0x3, 0x1000, 0x2c000a86, &(0x7f000096d000/0x1000)=nil) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000500)) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:23 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:23 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0x5, 0x1, 0xc8b, 0x7}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x80) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1}, 0x20020045) 14:05:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0xe}}, 0x20}}, 0x0) 14:05:23 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x3f8}, 0x20020045) 14:05:23 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0xb7, 0x401}, 0x0, 0xfffffffb, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) recvfrom$inet(r3, &(0x7f0000000140)=""/10, 0xa, 0x20, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000040)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x8c) ioctl$KDSETLED(r1, 0x4b32, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:24 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:24 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x3f9}, 0x20020045) 14:05:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0xf}}, 0x20}}, 0x0) [ 468.191547][T28374] input: syz0 as /devices/virtual/input/input17 14:05:24 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x1ff, 0x1400) write$FUSE_STATFS(r1, &(0x7f00000001c0)={0x60, 0x0, 0x6, {{0x8, 0x10000, 0x91, 0x1, 0x7fffffff, 0x0, 0x3, 0x590000}}}, 0x60) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xa00, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140), 0x4) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:24 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x3fa}, 0x20020045) 14:05:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x10}}, 0x20}}, 0x0) 14:05:24 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:24 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x4ff}, 0x20020045) 14:05:24 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0x5, 0x1, 0xc8b, 0x7}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x80) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1}, 0x20020045) 14:05:24 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x60}}, 0x20}}, 0x0) 14:05:24 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0xb7, 0x401}, 0x0, 0xfffffffb, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) recvfrom$inet(r3, &(0x7f0000000140)=""/10, 0xa, 0x20, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000040)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x8c) ioctl$KDSETLED(r1, 0x4b32, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:24 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x500}, 0x20020045) [ 468.790113][T28418] input: syz0 as /devices/virtual/input/input18 14:05:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) 14:05:24 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:24 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x600}, 0x20020045) 14:05:25 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0x5, 0x1, 0xc8b, 0x7}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x80) 14:05:25 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, @in6={0xa, 0x4e22, 0x4, @ipv4={[], [], @multicast1}}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e23, 0x80, @dev={0xfe, 0x80, [], 0x1d}}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x2}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e22, 0x3ff, @loopback, 0x7}], 0xdc) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x16, 0x0, 0x0, 0x4181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:25 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x20}}, 0x0) [ 469.240230][T28454] input: syz0 as /devices/virtual/input/input19 14:05:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x20}}, 0x0) 14:05:25 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x700}, 0x20020045) 14:05:25 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r2, r1) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r4, r3) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r6, r5) r7 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r8, r7) openat$cgroup_ro(r0, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r10, r9) r11 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r12, r11) r13 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r14, r13) splice(r0, 0x0, r14, 0x0, 0x8001, 0x9) r15 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2204c0, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r15, 0x4004551e, &(0x7f0000000140)=0x1ff) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r16 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r17, r16) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) 14:05:25 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0x5, 0x1, 0xc8b, 0x7}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 14:05:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x20}}, 0x0) 14:05:25 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:25 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x801}, 0x20020045) 14:05:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) [ 469.741102][T28496] input: syz0 as /devices/virtual/input/input20 14:05:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x20}}, 0x0) 14:05:25 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x900}, 0x20020045) 14:05:25 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) read$alg(r1, &(0x7f0000000000)=""/1, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0xa, 0x1f}) getgid() readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) 14:05:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x20}}, 0x0) 14:05:26 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:26 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0x5, 0x1, 0xc8b, 0x7}) 14:05:26 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xa00}, 0x20020045) 14:05:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xc}}, 0x20}}, 0x0) [ 470.249731][T28541] input: syz0 as /devices/virtual/input/input21 14:05:26 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:26 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xc00}, 0x20020045) 14:05:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xe}}, 0x20}}, 0x0) 14:05:26 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0x5, 0x1, 0xc8b, 0x7}) 14:05:26 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) [ 470.692430][T28574] input: syz0 as /devices/virtual/input/input22 14:05:26 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x0, 0x0, 0x1463}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000140)=0x5) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) r4 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r5, r4) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={r9, @broadcast, @remote}, 0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:26 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) 14:05:26 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:26 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xe00}, 0x20020045) 14:05:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf}}, 0x20}}, 0x0) 14:05:26 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0x5, 0x1, 0xc8b, 0x7}) 14:05:27 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf00}, 0x20020045) 14:05:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x20}}, 0x0) [ 471.087270][T28599] input: syz0 as /devices/virtual/input/input23 14:05:27 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) 14:05:27 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x60}}, 0x20}}, 0x0) 14:05:27 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) pipe(&(0x7f00000000c0)) 14:05:27 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x10ff}, 0x20020045) 14:05:27 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0}}, 0x20}}, 0x0) 14:05:27 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) [ 471.577035][T28644] input: syz0 as /devices/virtual/input/input24 14:05:27 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:27 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x14ff}, 0x20020045) 14:05:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300}}, 0x20}}, 0x0) 14:05:27 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) pipe(&(0x7f00000000c0)) 14:05:27 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:27 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:27 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) dup2(r2, r1) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x5, 0x297000) ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x19e8) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f0000000280)={0x4, 0x1, 'client1\x00', 0x1, "9fcb43b1bbdfa33c", "c8ebd1fc68f83a8498261a240d228fbbebab062640ed6503b222a05b0ccf0414", 0x841a, 0x3ff}) dup2(r0, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) r6 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4, 0x420040) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, r6) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000340)={0x13, 0x4}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:27 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x1800}, 0x20020045) 14:05:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5b2}}, 0x20}}, 0x0) [ 472.014628][T28683] input: syz0 as /devices/virtual/input/input25 14:05:28 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:28 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x2000}, 0x20020045) 14:05:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x600}}, 0x20}}, 0x0) [ 472.257305][T28693] Unknown ioctl 1086083857 14:05:28 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:28 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) 14:05:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa00}}, 0x20}}, 0x0) 14:05:28 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x2401}, 0x20020045) 14:05:28 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) [ 472.488170][T28693] Unknown ioctl 1086083857 [ 472.496982][T28718] input: syz0 as /devices/virtual/input/input26 14:05:28 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x2801}, 0x20020045) 14:05:28 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x0, 0x0, 0x1463}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000140)=0x5) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) r4 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r5, r4) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={r9, @broadcast, @remote}, 0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xc00}}, 0x20}}, 0x0) 14:05:28 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x2c01}, 0x20020045) 14:05:28 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:28 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) 14:05:28 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xe00}}, 0x20}}, 0x0) 14:05:29 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x3000}, 0x20020045) [ 473.032913][T28765] input: syz0 as /devices/virtual/input/input27 14:05:29 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf00}}, 0x20}}, 0x0) 14:05:29 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:29 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0x5, 0x1, 0xc8b, 0x7}) 14:05:29 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) 14:05:29 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x3801}, 0x20020045) 14:05:29 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) [ 473.444699][T28802] input: syz0 as /devices/virtual/input/input28 [ 473.489876][T28803] input: syz0 as /devices/virtual/input/input29 14:05:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3f00}}, 0x20}}, 0x0) 14:05:29 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x38ff}, 0x20020045) 14:05:29 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:29 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:29 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4000}}, 0x20}}, 0x0) 14:05:29 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0x5, 0x1, 0xc8b, 0x7}) 14:05:29 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:29 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x4000}, 0x20020045) 14:05:29 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5865}}, 0x20}}, 0x0) 14:05:30 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) [ 474.107132][T28850] input: syz0 as /devices/virtual/input/input31 14:05:30 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x4400}, 0x20020045) 14:05:30 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x20}}, 0x0) 14:05:30 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:30 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x4700}, 0x20020045) 14:05:30 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:30 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0x5, 0x1, 0xc8b, 0x7}) 14:05:30 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6558}}, 0x20}}, 0x0) 14:05:30 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xa0fc}, 0x20020045) [ 474.638890][T28897] input: syz0 as /devices/virtual/input/input34 14:05:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:30 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:30 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) 14:05:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8100}}, 0x20}}, 0x0) 14:05:30 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) pipe(&(0x7f00000000c0)) 14:05:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:30 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xccff}, 0x20020045) 14:05:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xb205}}, 0x20}}, 0x0) 14:05:31 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) 14:05:31 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 475.162216][T28941] input: syz0 as /devices/virtual/input/input35 14:05:31 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xd8ff}, 0x20020045) 14:05:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf000}}, 0x20}}, 0x0) 14:05:31 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) 14:05:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:31 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) pipe(&(0x7f00000000c0)) 14:05:31 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xdcff}, 0x20020045) 14:05:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xffff}}, 0x20}}, 0x0) [ 475.581268][T28975] input: syz0 as /devices/virtual/input/input36 14:05:31 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:31 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:31 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, 0x0, 0x0) 14:05:31 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xe400}, 0x20020045) 14:05:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) 14:05:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x20}}, 0x0) 14:05:31 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) 14:05:31 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xe803}, 0x20020045) 14:05:32 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, 0x0, 0x0) 14:05:32 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) [ 476.132719][T29021] input: syz0 as /devices/virtual/input/input37 14:05:32 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:32 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xec03}, 0x20020045) 14:05:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) 14:05:32 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, 0x0, 0x0) 14:05:32 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:32 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf000}, 0x20020045) 14:05:32 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) 14:05:32 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, 0x20}}, 0x0) 14:05:32 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf003}, 0x20020045) 14:05:32 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}], 0x2) [ 476.622451][T29066] input: syz0 as /devices/virtual/input/input38 14:05:32 executing program 2: socket$inet(0x2, 0x2000080001, 0x84) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:32 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0x20}}, 0x0) 14:05:32 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf103}, 0x20020045) 14:05:32 executing program 2: socket$inet(0x2, 0x2000080001, 0x84) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:32 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}], 0x2) 14:05:32 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) 14:05:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa}}, 0x20}}, 0x0) 14:05:33 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf203}, 0x20020045) [ 477.165551][T29113] input: syz0 as /devices/virtual/input/input41 14:05:33 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}], 0x1) 14:05:33 executing program 2: socket$inet(0x2, 0x2000080001, 0x84) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:33 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc}}, 0x20}}, 0x0) 14:05:33 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf303}, 0x20020045) 14:05:33 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20800, 0x0) 14:05:33 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380), 0x0) 14:05:33 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:33 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe}}, 0x20}}, 0x0) [ 477.730020][T29162] input: syz0 as /devices/virtual/input/input43 14:05:33 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf401}, 0x20020045) 14:05:33 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380), 0x0) 14:05:33 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:33 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) 14:05:34 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:34 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf403}, 0x20020045) [ 478.175199][T29197] input: syz0 as /devices/virtual/input/input46 14:05:34 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380), 0x0) 14:05:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}}, 0x20}}, 0x0) 14:05:34 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf803}, 0x20020045) 14:05:34 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) 14:05:34 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}}, 0x0) 14:05:34 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf903}, 0x20020045) 14:05:34 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) [ 478.633931][T29237] input: syz0 as /devices/virtual/input/input48 14:05:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{0x0}], 0x1) 14:05:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}}, 0x20}}, 0x0) 14:05:34 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xfa03}, 0x20020045) 14:05:34 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:34 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:34 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r1, 0x5501) 14:05:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0}}, 0x20}}, 0x0) 14:05:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{0x0}], 0x1) 14:05:34 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xfca0}, 0x20020045) [ 479.118038][T29280] input: syz0 as /devices/virtual/input/input51 14:05:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}}, 0x20}}, 0x0) 14:05:35 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(0x0, 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:35 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xfcff}, 0x20020045) 14:05:35 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000380)=[{0x0}], 0x1) 14:05:35 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b2}}, 0x20}}, 0x0) 14:05:35 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:35 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xff04}, 0x20020045) 14:05:35 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(0x0, 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}}, 0x20}}, 0x0) 14:05:35 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:35 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:35 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xff10}, 0x20020045) 14:05:35 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:35 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(0x0, 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa00}}, 0x20}}, 0x0) 14:05:35 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xff14}, 0x20020045) 14:05:36 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc00}}, 0x20}}, 0x0) 14:05:36 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:36 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:36 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:36 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xff38}, 0x20020045) 14:05:36 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe00}}, 0x20}}, 0x0) 14:05:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf00}}, 0x20}}, 0x0) 14:05:36 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xffcc}, 0x20020045) 14:05:36 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:36 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) 14:05:36 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:36 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f00}}, 0x20}}, 0x0) 14:05:36 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xffd8}, 0x20020045) 14:05:36 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:36 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:36 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) 14:05:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}}, 0x20}}, 0x0) 14:05:36 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xffdc}, 0x20020045) 14:05:36 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:37 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:37 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5865}}, 0x20}}, 0x0) 14:05:37 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xfffc}, 0x20020045) 14:05:37 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) 14:05:37 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000}}, 0x20}}, 0x0) 14:05:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:37 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x1fff8}, 0x20020045) 14:05:37 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 14:05:37 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6558}}, 0x20}}, 0x0) 14:05:37 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:37 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x34000}, 0x20020045) 14:05:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8100}}, 0x20}}, 0x0) 14:05:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x5d) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) shmget(0x3, 0x1000, 0x2c000a86, &(0x7f000096d000/0x1000)=nil) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000500)) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:37 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x400300}, 0x20020045) 14:05:37 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 14:05:37 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:38 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb205}}, 0x20}}, 0x0) 14:05:38 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x1000000}, 0x20020045) 14:05:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x5d) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) shmget(0x3, 0x1000, 0x2c000a86, &(0x7f000096d000/0x1000)=nil) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000500)) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:38 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) 14:05:38 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:38 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x2000000}, 0x20020045) 14:05:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf000}}, 0x20}}, 0x0) 14:05:38 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 14:05:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x5d) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) shmget(0x3, 0x1000, 0x2c000a86, &(0x7f000096d000/0x1000)=nil) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000500)) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000580)=""/64, 0x40}], 0x3) 14:05:38 executing program 5: socket$inet(0x2, 0x2000080001, 0x84) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:38 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x3000000}, 0x20020045) 14:05:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x34000}}, 0x20}}, 0x0) 14:05:38 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:05:38 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 482.994263][T29621] input: syz0 as /devices/virtual/input/input65 14:05:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}}, 0x20}}, 0x0) 14:05:39 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x4000000}, 0x20020045) 14:05:39 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)={0x80000001, 0x400}) pipe(&(0x7f00000000c0)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, r7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xf, 0x0, 0x7, 0x100, 0x230, 0xffffffffffffffff, 0x1, [], r6, r8, 0x4, 0x4}, 0x3c) r9 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r10, r9) r11 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r12, r11) dup2(0xffffffffffffffff, r11) r13 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r14, r13) dup2(r2, r14) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:39 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:39 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)={0x80000001, 0x400}) pipe(&(0x7f00000000c0)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, r7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xf, 0x0, 0x7, 0x100, 0x230, 0xffffffffffffffff, 0x1, [], r6, r8, 0x4, 0x4}, 0x3c) r9 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r10, r9) r11 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r12, r11) dup2(0xffffffffffffffff, r11) r13 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r14, r13) dup2(r2, r14) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}}, 0x20}}, 0x0) 14:05:39 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:39 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x4ff0000}, 0x20020045) [ 483.487403][T29656] input: syz0 as /devices/virtual/input/input66 14:05:39 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000}}, 0x20}}, 0x0) 14:05:39 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x5000000}, 0x20020045) 14:05:39 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x8, 0x80) dup3(r0, r0, 0x80000) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000140)={{0x2, 0x4e21, @empty}, {0x1, @remote}, 0x44, {0x2, 0x4e22, @rand_addr=0x600}, 'veth0_to_team\x00'}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) r4 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r5, r4) write$P9_RVERSION(r5, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xffffffff, 0x6, '9P2000'}, 0x13) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x20}}, 0x0) 14:05:39 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r2, r1) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x2, r4}) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x0, 0x1, 0x6, 0x0, r4}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r5, r0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000140)=""/219) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, r6) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 483.900044][T29689] input: syz0 as /devices/virtual/input/input67 14:05:39 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:40 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x6000000}, 0x20020045) 14:05:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000000}}, 0x20}}, 0x0) 14:05:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r1, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x5d) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) shmget(0x3, 0x1000, 0x2c000a86, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000500)) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='\x00\x00\xe4\x00\x00\x00\x00\x00\xd56\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r4, r3) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000540)={0x697adc31f6fede90, 0x199483f738cb8739, 0x1, 0x9, 0x1f}) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000300)=""/64, 0x40}], 0x3) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000003c0)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000340)={@mcast1, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000600)={0x2c, 0x4, r5, 0x6}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000640)="5ee9b3d889011db422157e5199fd88683305be694646f8a4c1c3d6084cf98aec11dfb756f3f6725ccb3550fb5bb7a3f3e0cd97a24c0c6890a712cb38f83e74dbf3ed9e", 0x43}, {&(0x7f00000006c0)="7ac33c8e9a434315ecf17a9de85baa1da1b3623a36a2c7b247c0c732277e74e0463aebf7e51fbf6ca54bed6b2e907ecb87d2410a2ee47105921c339c7c40aec5017597fe042cab1d2e7a1742685f266caf59825dfe03ec8a1c7f07da8b60b15644ba828eb6cbd61a75e048168a03caa4a1931d18662749b5d2a0f26c4f01158588cac692a8a1a7a2bb55107917fc54b5ab30452c35bb9ba529919d66aad1b20d2759f0ea97726e5fc8c72d97d2", 0xad}, {&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000880)="84dc1acfc09f4e483360830faf1f6abfdadb8c27eaafab710046da78575ddb7682232ff0d253cecbbfae229ee33661880da5af2f302d9c31cfddc46548b316650966e72470b3e166ce4f007cfd9ae4366b274ada80c025e10809aa84bdb2386060b141b62dbdbc1a1f", 0x69}, {&(0x7f0000000900)="3465b426d8fca4a5e8ab70e4ddf344828a4efef19393039cd7575726f2285389d7fff6974e72e8c76acdb8a9d9316981c0c0769e539780a2684c345529bdc74918e09ccf3837aa25e92a15dbb8131b2c5fe471c89af1f4b86d526f833311e0af03fd88da12cb1ddaeecd934e0e9f604a2eb8bdd2fd91545b35e2bbfd5d0fc86d", 0x80}, {&(0x7f0000001680)="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", 0xffb}], 0x18f, 0x0, 0x0, 0x24004841}, 0x20008000) socket$inet_udplite(0x2, 0x2, 0x88) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xdd408ecc4a2ff45f, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x0, 0xf}}, 0x20) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000001c0)={[], 0x9c, 0x92, 0x0, 0x8}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x20c080, 0x0) write$binfmt_script(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f617564696f00202f6465762f6d69641126e928db4748a2817580e2d1ecb483b181c5a436c993d25b87b680480add8396dd54ebd9812735c342ae5f8b0c65d6d2a4e49808050a4e3735359df515d90a788868e4ae28c0513d6296ba871ea4aff1bcd8131821e387c3e2fb087c69da363c4acb44b090abdadceb27d7add64f45f005386860875660760c4f990f0eaab699f6e007e6bff947f8950bee26f99043d536fcb420cb108088c520fbd96db09c3dfbd5a3"], 0xd2) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, &(0x7f00000004c0), 0x0) socket(0x10, 0x2, 0x0) 14:05:40 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x7000000}, 0x20020045) 14:05:40 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:40 executing program 5: syz_open_dev$evdev(0x0, 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000}}, 0x20}}, 0x0) 14:05:40 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/de\x8d/in0ut/\x80vet$g\x00', 0x2, 0x10c1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="e3d1ca49a1a9f26d400073bc67fef7761af0b0e17955bf9f79fcebfc4ae6055227d90598474fd503acf2744f65243201e3e3412e6ab6780fe1d2d5e67f8d73585ca769572891153033295cf00de7327479f6fe1bb6c948a0e2a68f8a20e57e0fbb79036fa265cde68786cf73cf381e87e13588ffaf5a8ddb7be5b0d5e7aaa035d098792a884ba72ad01de54ca70c6d0023d59db89a4b7db7cacacfcd7cae95135de0fd974bcc7b044d6905375194429d28c25b2de6ce8f", 0xb7, 0xffffffffffffffff) r3 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='g', 0x524, 0xfffffffffffffffb) keyctl$revoke(0x3, r3) r4 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='g', 0x524, 0xfffffffffffffffb) r5 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r6, r5) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000580)={0x3000, 0x1000, 0x0, 0x20, 0x1}) keyctl$revoke(0x3, r4) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x18000, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, &(0x7f0000000500)=0x4000) keyctl$dh_compute(0x17, &(0x7f0000000240)={r2, r3, r4}, &(0x7f0000000280)=""/107, 0x6b, &(0x7f0000000340)={&(0x7f0000000300)={'tgr160\x00'}, &(0x7f00000003c0)="847d48de555c2021bf0193bd6ef05b1d80918067fcbe8fec9fa9de91ca869484cf788956c347be08ee46be4c87377ea9e356b5e0e58546e92ca12cd3c2b13d384e1ed3b1d80f2d759cffee022329c371df7c5809589e6ea0f9272aa26d2649cb89b84ff6422e051c2ab50964e1737ed0068ea737a52d31b278df2b30b35b6e802a213bbf778be70e5dfd9b12a773be3cfd6043bb8b2ad5afa5ca37f72630b647704ca0e035003d16d84a5fd8dbe050cf500adb27ef547f551a60098d30cb6a1baf7567d96d25f74413cd2055ef2257", 0xcf}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 484.438643][T29720] input: syz0 as /devices/virtual/input/input68 14:05:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000000}}, 0x20}}, 0x0) 14:05:40 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x8000000}, 0x20020045) 14:05:40 executing program 5: syz_open_dev$evdev(0x0, 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:40 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:40 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/de\x8d/in0ut/\x80vet$g\x00', 0x2, 0x10c1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="e3d1ca49a1a9f26d400073bc67fef7761af0b0e17955bf9f79fcebfc4ae6055227d90598474fd503acf2744f65243201e3e3412e6ab6780fe1d2d5e67f8d73585ca769572891153033295cf00de7327479f6fe1bb6c948a0e2a68f8a20e57e0fbb79036fa265cde68786cf73cf381e87e13588ffaf5a8ddb7be5b0d5e7aaa035d098792a884ba72ad01de54ca70c6d0023d59db89a4b7db7cacacfcd7cae95135de0fd974bcc7b044d6905375194429d28c25b2de6ce8f", 0xb7, 0xffffffffffffffff) r3 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='g', 0x524, 0xfffffffffffffffb) keyctl$revoke(0x3, r3) r4 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='g', 0x524, 0xfffffffffffffffb) r5 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r6, r5) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000580)={0x3000, 0x1000, 0x0, 0x20, 0x1}) keyctl$revoke(0x3, r4) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x18000, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, &(0x7f0000000500)=0x4000) keyctl$dh_compute(0x17, &(0x7f0000000240)={r2, r3, r4}, &(0x7f0000000280)=""/107, 0x6b, &(0x7f0000000340)={&(0x7f0000000300)={'tgr160\x00'}, &(0x7f00000003c0)="847d48de555c2021bf0193bd6ef05b1d80918067fcbe8fec9fa9de91ca869484cf788956c347be08ee46be4c87377ea9e356b5e0e58546e92ca12cd3c2b13d384e1ed3b1d80f2d759cffee022329c371df7c5809589e6ea0f9272aa26d2649cb89b84ff6422e051c2ab50964e1737ed0068ea737a52d31b278df2b30b35b6e802a213bbf778be70e5dfd9b12a773be3cfd6043bb8b2ad5afa5ca37f72630b647704ca0e035003d16d84a5fd8dbe050cf500adb27ef547f551a60098d30cb6a1baf7567d96d25f74413cd2055ef2257", 0xcf}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 484.803342][T29746] input: syz0 as /devices/virtual/input/input69 14:05:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa000000}}, 0x20}}, 0x0) 14:05:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r1, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x5d) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) shmget(0x3, 0x1000, 0x2c000a86, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000500)) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0xf7) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) dup2(r4, r3) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000540)={0x697adc31f6fede90, 0x199483f738cb8739, 0x1, 0x9, 0x1f}) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000300)=""/64, 0x40}], 0x3) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000003c0)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000340)={@mcast1, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000600)={0x2c, 0x4, r6, 0x6}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000640)="5ee9b3d889011db422157e5199fd88683305be694646f8a4c1c3d6084cf98aec11dfb756f3f6725ccb3550fb5bb7a3f3e0cd97a24c0c6890a712cb38f83e74dbf3ed9e", 0x43}, {&(0x7f00000006c0)="7ac33c8e9a434315ecf17a9de85baa1da1b3623a36a2c7b247c0c732277e74e0463aebf7e51fbf6ca54bed6b2e907ecb87d2410a2ee47105921c339c7c40aec5017597fe042cab1d2e7a1742685f266caf59825dfe03ec8a1c7f07da8b60b15644ba828eb6cbd61a75e048168a03caa4a1931d18662749b5d2a0f26c4f01158588cac692a8a1a7a2bb55107917fc54b5ab30452c35bb9ba529919d66aad1b20d2759f0ea97726e5fc8c72d97d2", 0xad}, {&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000880)="84dc1acfc09f4e483360830faf1f6abfdadb8c27eaafab710046da78575ddb7682232ff0d253cecbbfae229ee33661880da5af2f302d9c31cfddc46548b316650966e72470b3e166ce4f007cfd9ae4366b274ada80c025e10809aa84bdb2386060b141b62dbdbc1a1f", 0x69}, {&(0x7f0000000900)="3465b426d8fca4a5e8ab70e4ddf344828a4efef19393039cd7575726f2285389d7fff6974e72e8c76acdb8a9d9316981c0c0769e539780a2684c345529bdc74918e09ccf3837aa25e92a15dbb8131b2c5fe471c89af1f4b86d526f833311e0af03fd88da12cb1ddaeecd934e0e9f604a2eb8bdd2fd91545b35e2bbfd5d0fc86d", 0x80}, {&(0x7f0000001680)="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", 0xffb}], 0x18f, 0x0, 0x0, 0x24004841}, 0x20008000) socket$inet_udplite(0x2, 0x2, 0x88) 14:05:40 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x8010000}, 0x20020045) 14:05:40 executing program 5: syz_open_dev$evdev(0x0, 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:41 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 485.019997][T29764] input: syz0 as /devices/virtual/input/input70 14:05:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc000000}}, 0x20}}, 0x0) 14:05:41 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x9000000}, 0x20020045) 14:05:41 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe000000}}, 0x20}}, 0x0) 14:05:41 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xa000000}, 0x20020045) 14:05:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r1, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x5d) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) shmget(0x3, 0x1000, 0x2c000a86, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x152, 0x247bb7e47743b615, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000500)) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r4, r3) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000540)={0x697adc31f6fede90, 0x199483f738cb8739, 0x1, 0x9, 0x1f}) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000300)=""/64, 0x40}], 0x3) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000003c0)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000340)={@mcast1, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000600)={0x2c, 0x0, r5, 0x6}, 0x9923113e995e882d, &(0x7f0000000980), 0x18f, 0x0, 0x0, 0x4}, 0x20008000) socket$inet_udplite(0x2, 0x2, 0x88) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xdd408ecc4a2ff45f, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x0, 0xf}}, 0x20) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000001c0)={[], 0x9c, 0x92, 0x0, 0x8}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x20c080, 0x0) write$binfmt_script(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202e2f66696c653a202f64657698617564696f00202f6465762f6d69641126e928db4748a2817580e2d1ecb483b101c5a436c993d25b87b680480add8396dd54ebd9812735c342ae5f8b0c65d6d2a4e49808050a4e3735359df515d90a788868e4ae28c0513d6296ba871ea4aff1bcd8131821e387c3e2fb087c69da363c4acb44b0d64f45f005386860875660760c4f990f0eaab699f6e007e6bff947f8950bee04f99043d536fcb420cb108088c520fbd96db09c3dfbd5a3"], 0xd2) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, &(0x7f00000004c0), 0x0) [ 485.345480][T29760] input: syz1 as /devices/virtual/input/input71 14:05:41 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 485.398232][T29785] input: syz0 as /devices/virtual/input/input72 14:05:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r1, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x5d) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) shmget(0x3, 0x1000, 0x2c000a86, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000500)) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0xf7) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) dup2(r4, r3) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000540)={0x697adc31f6fede90, 0x199483f738cb8739, 0x1, 0x9, 0x1f}) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000300)=""/64, 0x40}], 0x3) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000003c0)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000340)={@mcast1, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000600)={0x2c, 0x4, r6, 0x6}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000640)="5ee9b3d889011db422157e5199fd88683305be694646f8a4c1c3d6084cf98aec11dfb756f3f6725ccb3550fb5bb7a3f3e0cd97a24c0c6890a712cb38f83e74dbf3ed9e", 0x43}, {&(0x7f00000006c0)="7ac33c8e9a434315ecf17a9de85baa1da1b3623a36a2c7b247c0c732277e74e0463aebf7e51fbf6ca54bed6b2e907ecb87d2410a2ee47105921c339c7c40aec5017597fe042cab1d2e7a1742685f266caf59825dfe03ec8a1c7f07da8b60b15644ba828eb6cbd61a75e048168a03caa4a1931d18662749b5d2a0f26c4f01158588cac692a8a1a7a2bb55107917fc54b5ab30452c35bb9ba529919d66aad1b20d2759f0ea97726e5fc8c72d97d2", 0xad}, {&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000880)="84dc1acfc09f4e483360830faf1f6abfdadb8c27eaafab710046da78575ddb7682232ff0d253cecbbfae229ee33661880da5af2f302d9c31cfddc46548b316650966e72470b3e166ce4f007cfd9ae4366b274ada80c025e10809aa84bdb2386060b141b62dbdbc1a1f", 0x69}, {&(0x7f0000000900)="3465b426d8fca4a5e8ab70e4ddf344828a4efef19393039cd7575726f2285389d7fff6974e72e8c76acdb8a9d9316981c0c0769e539780a2684c345529bdc74918e09ccf3837aa25e92a15dbb8131b2c5fe471c89af1f4b86d526f833311e0af03fd88da12cb1ddaeecd934e0e9f604a2eb8bdd2fd91545b35e2bbfd5d0fc86d", 0x80}, {&(0x7f0000001680)="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", 0xffb}], 0x18f, 0x0, 0x0, 0x24004841}, 0x20008000) socket$inet_udplite(0x2, 0x2, 0x88) 14:05:41 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xc000000}, 0x20020045) 14:05:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf000000}}, 0x20}}, 0x0) 14:05:41 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) fchdir(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0xfffffffd}, 0xc) fremovexattr(r2, &(0x7f00000001c0)=@random={'trusted.', '/dev/midi#\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$CAPI_SET_FLAGS(r4, 0x80044324, &(0x7f0000000000)) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, r6) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:41 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 485.901137][T29812] input: syz0 as /devices/virtual/input/input73 14:05:41 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xe000000}, 0x20020045) 14:05:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000000}}, 0x20}}, 0x0) 14:05:42 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:42 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 486.099655][T29828] input: syz1 as /devices/virtual/input/input74 14:05:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xfffffbc2, @remote}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @local}], 0x3c) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:42 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf000000}, 0x20020045) [ 486.314845][T29842] input: syz0 as /devices/virtual/input/input75 14:05:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r1, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x5d) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) shmget(0x3, 0x1000, 0x2c000a86, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000500)) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0xf7) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) dup2(r4, r3) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000540)={0x697adc31f6fede90, 0x199483f738cb8739, 0x1, 0x9, 0x1f}) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000300)=""/64, 0x40}], 0x3) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000003c0)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000340)={@mcast1, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000600)={0x2c, 0x4, r6, 0x6}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000640)="5ee9b3d889011db422157e5199fd88683305be694646f8a4c1c3d6084cf98aec11dfb756f3f6725ccb3550fb5bb7a3f3e0cd97a24c0c6890a712cb38f83e74dbf3ed9e", 0x43}, {&(0x7f00000006c0)="7ac33c8e9a434315ecf17a9de85baa1da1b3623a36a2c7b247c0c732277e74e0463aebf7e51fbf6ca54bed6b2e907ecb87d2410a2ee47105921c339c7c40aec5017597fe042cab1d2e7a1742685f266caf59825dfe03ec8a1c7f07da8b60b15644ba828eb6cbd61a75e048168a03caa4a1931d18662749b5d2a0f26c4f01158588cac692a8a1a7a2bb55107917fc54b5ab30452c35bb9ba529919d66aad1b20d2759f0ea97726e5fc8c72d97d2", 0xad}, {&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000880)="84dc1acfc09f4e483360830faf1f6abfdadb8c27eaafab710046da78575ddb7682232ff0d253cecbbfae229ee33661880da5af2f302d9c31cfddc46548b316650966e72470b3e166ce4f007cfd9ae4366b274ada80c025e10809aa84bdb2386060b141b62dbdbc1a1f", 0x69}, {&(0x7f0000000900)="3465b426d8fca4a5e8ab70e4ddf344828a4efef19393039cd7575726f2285389d7fff6974e72e8c76acdb8a9d9316981c0c0769e539780a2684c345529bdc74918e09ccf3837aa25e92a15dbb8131b2c5fe471c89af1f4b86d526f833311e0af03fd88da12cb1ddaeecd934e0e9f604a2eb8bdd2fd91545b35e2bbfd5d0fc86d", 0x80}, {&(0x7f0000001680)="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", 0xffb}], 0x18f, 0x0, 0x0, 0x24004841}, 0x20008000) socket$inet_udplite(0x2, 0x2, 0x88) 14:05:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f000000}}, 0x20}}, 0x0) 14:05:42 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:42 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x10000000}, 0x20020045) 14:05:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r1, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x5d) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) shmget(0x3, 0x1000, 0x2c000a86, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000500)) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x7fffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r4, r3) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000540)={0x697adc31f6fede90, 0x199483f738cb8739, 0x1, 0x9, 0x1f}) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000300)=""/64, 0x40}], 0x3) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000003c0)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000340)={@mcast1, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000600)={0x2c, 0x4, r5, 0x6}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000640)="5ee9b3d889011db422157e5199fd88683305be694646f8a4c1c3d6084cf98aec11dfb756f3f6725ccb3550fb5bb7a3f3e0cd97a24c0c6890a712cb38f83e74dbf3ed9e", 0x43}, {&(0x7f00000006c0)="7ac33c8e9a434315ecf17a9de85baa1da1b3623a36a2c7b247c0c732277e74e0463aebf7e51fbf6ca54bed6b2e907ecb87d2410a2ee47105921c339c7c40aec5017597fe042cab1d2e7a1742685f266caf59825dfe03ec8a1c7f07da8b60b15644ba828eb6cbd61a75e048168a03caa4a1931d18662749b5d2a0f26c4f01158588cac692a8a1a7a2bb55107917fc54b5ab30452c35bb9ba529919d66aad1b20d2759f0ea97726e5fc8c72d97d2", 0xad}, {&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000880)="84dc1acfc09f4e483360830faf1f6abfdadb8c27eaafab710046da78575ddb7682232ff0d253cecbbfae229ee33661880da5af2f302d9c31cfddc46548b316650966e72470b3e166ce4f007cfd9ae4366b274ada80c025e10809aa84bdb2386060b141b62dbdbc1a1f", 0x69}, {&(0x7f0000000900)="3465b426d8fca4a5e8ab70e4ddf344828a4efef19393039cd7575726f2285389d7fff6974e72e8c76acdb8a9d9316981c0c0769e539780a2684c345529bdc74918e09ccf3837aa25e92a15dbb8131b2c5fe471c89af1f4b86d526f833311e0af03fd88da12cb1ddaeecd934e0e9f604a2eb8bdd2fd91545b35e2bbfd5d0fc86d", 0x80}, {&(0x7f0000001680)="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", 0xffb}], 0x18f, 0x0, 0x0, 0x24004841}, 0x20008000) socket$inet_udplite(0x2, 0x2, 0x88) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xdd408ecc4a2ff45f, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x0, 0xf}}, 0x20) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000001c0)={[], 0x9c, 0x92, 0x0, 0x8}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x20c080, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r8, r7) r9 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r10, r9) write$binfmt_script(r6, &(0x7f00000004c0)=ANY=[@ANYRES64=r7, @ANYRESDEC=0x0, @ANYRESHEX=r10], 0xfffffc8b) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, &(0x7f00000004c0), 0x0) socket(0x10, 0x2, 0x0) 14:05:42 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x20}}, 0x0) 14:05:42 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x10ff0000}, 0x20020045) 14:05:42 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 486.815735][T29874] input: syz1 as /devices/virtual/input/input76 14:05:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60000000}}, 0x20}}, 0x0) 14:05:42 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r1, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x5d) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) shmget(0x3, 0x1000, 0x2c000a86, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000500)) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x7fffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r4, r3) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000540)={0x697adc31f6fede90, 0x199483f738cb8739, 0x1, 0x9, 0x1f}) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000300)=""/64, 0x40}], 0x3) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000003c0)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000340)={@mcast1, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000600)={0x2c, 0x4, r5, 0x6}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000640)="5ee9b3d889011db422157e5199fd88683305be694646f8a4c1c3d6084cf98aec11dfb756f3f6725ccb3550fb5bb7a3f3e0cd97a24c0c6890a712cb38f83e74dbf3ed9e", 0x43}, {&(0x7f00000006c0)="7ac33c8e9a434315ecf17a9de85baa1da1b3623a36a2c7b247c0c732277e74e0463aebf7e51fbf6ca54bed6b2e907ecb87d2410a2ee47105921c339c7c40aec5017597fe042cab1d2e7a1742685f266caf59825dfe03ec8a1c7f07da8b60b15644ba828eb6cbd61a75e048168a03caa4a1931d18662749b5d2a0f26c4f01158588cac692a8a1a7a2bb55107917fc54b5ab30452c35bb9ba529919d66aad1b20d2759f0ea97726e5fc8c72d97d2", 0xad}, {&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000880)="84dc1acfc09f4e483360830faf1f6abfdadb8c27eaafab710046da78575ddb7682232ff0d253cecbbfae229ee33661880da5af2f302d9c31cfddc46548b316650966e72470b3e166ce4f007cfd9ae4366b274ada80c025e10809aa84bdb2386060b141b62dbdbc1a1f", 0x69}, {&(0x7f0000000900)="3465b426d8fca4a5e8ab70e4ddf344828a4efef19393039cd7575726f2285389d7fff6974e72e8c76acdb8a9d9316981c0c0769e539780a2684c345529bdc74918e09ccf3837aa25e92a15dbb8131b2c5fe471c89af1f4b86d526f833311e0af03fd88da12cb1ddaeecd934e0e9f604a2eb8bdd2fd91545b35e2bbfd5d0fc86d", 0x80}, {&(0x7f0000001680)="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", 0xffb}], 0x18f, 0x0, 0x0, 0x24004841}, 0x20008000) socket$inet_udplite(0x2, 0x2, 0x88) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xdd408ecc4a2ff45f, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x0, 0xf}}, 0x20) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000001c0)={[], 0x9c, 0x92, 0x0, 0x8}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x20c080, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r8, r7) r9 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r10, r9) write$binfmt_script(r6, &(0x7f00000004c0)=ANY=[@ANYRES64=r7, @ANYRESDEC=0x0, @ANYRESHEX=r10], 0xfffffc8b) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, &(0x7f00000004c0), 0x0) socket(0x10, 0x2, 0x0) 14:05:43 executing program 4: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:43 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x14ff0000}, 0x20020045) 14:05:43 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65580000}}, 0x20}}, 0x0) 14:05:43 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:43 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x18000000}, 0x20020045) 14:05:43 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x81000000}}, 0x20}}, 0x0) 14:05:43 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:43 executing program 4: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:43 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffff}}, 0x20}}, 0x0) 14:05:43 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x20000000}, 0x20020045) 14:05:43 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:43 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9effffff}}, 0x20}}, 0x0) 14:05:43 executing program 4: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:43 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x24010000}, 0x20020045) 14:05:44 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0245629, &(0x7f0000000140)={0x0, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000180), &(0x7f00000001c0)=0x8) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) r5 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r6, r5) execveat(r6, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000240)='.V\x00', &(0x7f0000000280)='\x00'], &(0x7f0000000440)=[&(0x7f0000000300)='/dev/vga_arbiter\x00', &(0x7f0000000340)='/dev/midi#\x00', &(0x7f00000003c0)='}+vboxnet1\'posix_acl_access\x00', &(0x7f0000000400)='/dev/audio\x00'], 0x800) prctl$PR_MCE_KILL(0x21, 0x3, 0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb2050000}}, 0x20}}, 0x0) 14:05:44 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x28010000}, 0x20020045) 14:05:44 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:44 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:44 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x2c010000}, 0x20020045) 14:05:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}}, 0x20}}, 0x0) 14:05:44 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:44 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r1, r0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000140), &(0x7f0000000000)=0x60) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:44 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:44 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x30000000}, 0x20020045) 14:05:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffa888}}, 0x20}}, 0x0) 14:05:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r1, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x5d) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) shmget(0x3, 0x1000, 0x2c000a86, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000500)) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @empty=[0x7, 0x80350000, 0xe80, 0x4002c00, 0x7, 0x800000000000e012], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff88, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0xe80, 0xff00000000000000, 0xe80], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r4, r3) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000540)={0x697adc31f6fede90, 0x199483f738cb8739, 0x1, 0x9, 0x1f}) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000300)=""/64, 0x40}], 0x3) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000003c0)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000340)={@mcast1, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000600)={0x2c, 0x4, r5, 0x6}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000640)="5ee9b3d889011db422157e5199fd88683305be694646f8a4c1c3d6084cf98aec11dfb756f3f6725ccb3550fb5bb7a3f3e0cd97a24c0c6890a712cb38f83e74dbf3ed9e", 0x43}, {&(0x7f00000006c0)="7ac33c8e9a434315ecf17a9de85baa1da1b3623a36a2c7b247c0c732277e74e0463aebf7e51fbf6ca54bed6b2e907ecb87d2410a2ee47105921c339c7c40aec5017597fe042cab1d2e7a1742685f266caf59825dfe03ec8a1c7f07da8b60b15644ba828eb6cbd61a75e048168a03caa4a1931d18662749b5d2a0f26c4f01158588cac692a8a1a7a2bb55107917fc54b5ab30452c35bb9ba529919d66aad1b20d2759f0ea97726e5fc8c72d97d2", 0xad}, {&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000880)="84dc1acfc09f4e483360830faf1f6abfdadb8c27eaafab710046da78575ddb7682232ff0d253cecbbfae229ee33661880da5af2f302d9c31cfddc46548b316650966e72470b3e166ce4f007cfd9ae4366b274ada80c025e10809aa84bdb2386060b141b62dbdbc1a1f", 0x69}, {&(0x7f0000000900)="3465b426d8fca4a5e8ab70e4ddf344828a4efef19393039cd7575726f2285389d7fff6974e72e8c76acdb8a9d9316981c0c0769e539780a2684c345529bdc74918e09ccf3837aa25e92a15dbb8131b2c5fe471c89af1f4b86d526f833311e0af03fd88da12cb1ddaeecd934e0e9f604a2eb8bdd2fd91545b35e2bbfd5d0fc86d", 0x80}, {&(0x7f0000001680)="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", 0xffb}], 0x18f, 0x0, 0x0, 0x24004841}, 0x20008000) socket$inet_udplite(0x2, 0x2, 0x88) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xdd408ecc4a2ff45f, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x0, 0xf}}, 0x20) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000001c0)={[], 0x9c, 0x92, 0x0, 0x8}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x20c080, 0x0) write$binfmt_script(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f617564696f00202f6465762f6d69641126e928db4748a2817580e2d1ecb483b101c5a436c993d25b87b680480add8396dd54ebd9812735c342ae5f8b0c65d6d2a4e49808050a4e3735359df515d90a788868e4ae28c0513d6296ba871ea4aff1bcd8131821e387c3e2fb087c69da363c4acb44b090abdadceb27d7add64f45f005386860875660760c4f990f0eaab699f6e007e6bff947f8950bee04f99043d536fcb420cb108088c520fbd96db09c3dfbd5a3"], 0xd2) 14:05:44 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:44 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:44 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='user.syz\x00') sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1}, 0x20020045) 14:05:45 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x38010000}, 0x20020045) 14:05:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff000}}, 0x20}}, 0x0) 14:05:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r1, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x5d) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) shmget(0x3, 0x1000, 0x2c000a86, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000500)) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @empty=[0x7, 0x80350000, 0xe80, 0x4002c00, 0x7, 0x800000000000e012], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff88, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0xe80, 0xff00000000000000, 0xe80], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r4, r3) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000540)={0x697adc31f6fede90, 0x199483f738cb8739, 0x1, 0x9, 0x1f}) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000300)=""/64, 0x40}], 0x3) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000003c0)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000340)={@mcast1, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000600)={0x2c, 0x4, r5, 0x6}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000640)="5ee9b3d889011db422157e5199fd88683305be694646f8a4c1c3d6084cf98aec11dfb756f3f6725ccb3550fb5bb7a3f3e0cd97a24c0c6890a712cb38f83e74dbf3ed9e", 0x43}, {&(0x7f00000006c0)="7ac33c8e9a434315ecf17a9de85baa1da1b3623a36a2c7b247c0c732277e74e0463aebf7e51fbf6ca54bed6b2e907ecb87d2410a2ee47105921c339c7c40aec5017597fe042cab1d2e7a1742685f266caf59825dfe03ec8a1c7f07da8b60b15644ba828eb6cbd61a75e048168a03caa4a1931d18662749b5d2a0f26c4f01158588cac692a8a1a7a2bb55107917fc54b5ab30452c35bb9ba529919d66aad1b20d2759f0ea97726e5fc8c72d97d2", 0xad}, {&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000880)="84dc1acfc09f4e483360830faf1f6abfdadb8c27eaafab710046da78575ddb7682232ff0d253cecbbfae229ee33661880da5af2f302d9c31cfddc46548b316650966e72470b3e166ce4f007cfd9ae4366b274ada80c025e10809aa84bdb2386060b141b62dbdbc1a1f", 0x69}, {&(0x7f0000000900)="3465b426d8fca4a5e8ab70e4ddf344828a4efef19393039cd7575726f2285389d7fff6974e72e8c76acdb8a9d9316981c0c0769e539780a2684c345529bdc74918e09ccf3837aa25e92a15dbb8131b2c5fe471c89af1f4b86d526f833311e0af03fd88da12cb1ddaeecd934e0e9f604a2eb8bdd2fd91545b35e2bbfd5d0fc86d", 0x80}, {&(0x7f0000001680)="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", 0xffb}], 0x18f, 0x0, 0x0, 0x24004841}, 0x20008000) socket$inet_udplite(0x2, 0x2, 0x88) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xdd408ecc4a2ff45f, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x0, 0xf}}, 0x20) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000001c0)={[], 0x9c, 0x92, 0x0, 0x8}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x20c080, 0x0) write$binfmt_script(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f617564696f00202f6465762f6d69641126e928db4748a2817580e2d1ecb483b101c5a436c993d25b87b680480add8396dd54ebd9812735c342ae5f8b0c65d6d2a4e49808050a4e3735359df515d90a788868e4ae28c0513d6296ba871ea4aff1bcd8131821e387c3e2fb087c69da363c4acb44b090abdadceb27d7add64f45f005386860875660760c4f990f0eaab699f6e007e6bff947f8950bee04f99043d536fcb420cb108088c520fbd96db09c3dfbd5a3"], 0xd2) 14:05:45 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r4, r3) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r4) r5 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r6 = gettid() fcntl$setownex(r5, 0xf, &(0x7f0000000280)={0x2, r6}) sched_rr_get_interval(r6, &(0x7f0000000140)) 14:05:45 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:45 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x38ff0000}, 0x20020045) 14:05:45 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}}, 0x20}}, 0x0) 14:05:45 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x40000000}, 0x20020045) 14:05:45 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff9e}}, 0x20}}, 0x0) 14:05:45 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r4, r3) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r4) r5 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r6 = gettid() fcntl$setownex(r5, 0xf, &(0x7f0000000280)={0x2, r6}) sched_rr_get_interval(r6, &(0x7f0000000140)) 14:05:45 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x44000000}, 0x20020045) 14:05:45 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:45 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b80)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="e24fe3829b6e6d18b3f50e9a2ffcf2502974740dfde7dc490b94937c5afadd490f194a229e76f7decc00e53eae67d1928b", 0x31}, {0x0}], 0x2}, {0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000016c0)}], 0x1, &(0x7f0000001ac0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="18000000010000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="100000000100", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x35, 0x20005000}], 0x2, 0x0) r2 = getegid() fchownat(r0, &(0x7f0000000180)='./file0\x00', r1, r2, 0x1000) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r6, r5) r7 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r8, r7) splice(r5, &(0x7f0000000000)=0x7, r8, &(0x7f0000000140)=0x91c, 0x7fff, 0x0) dup2(r4, r3) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffff0}}, 0x20}}, 0x0) 14:05:45 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x47000000}, 0x20020045) 14:05:46 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:46 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:46 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b80)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="e24fe3829b6e6d18b3f50e9a2ffcf2502974740dfde7dc490b94937c5afadd490f194a229e76f7decc00e53eae67d1928b", 0x31}, {0x0}], 0x2}, {0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000016c0)}], 0x1, &(0x7f0000001ac0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="18000000010000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="100000000100", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x35, 0x20005000}], 0x2, 0x0) r2 = getegid() fchownat(r0, &(0x7f0000000180)='./file0\x00', r1, r2, 0x1000) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r6, r5) r7 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r8, r7) splice(r5, &(0x7f0000000000)=0x7, r8, &(0x7f0000000140)=0x91c, 0x7fff, 0x0) dup2(r4, r3) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30005, 0x0) r1 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x14, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$VIDIOC_G_FBUF(r3, 0x802c560a, &(0x7f0000000240)={0x4, 0x80, &(0x7f0000000140)="425d0f5e8f29fde49dbc26fa68f5a588edc3c720858690993e8692ddaea5d947db7a2390e907ed4259f21a5152fe976a6f48fc53070c3fb4a6713ecb7db6b592fe07080d4c4b9989eaaba1768149862f9e180662c089e484794a1831757c6d653698a267f327319dd243e57922185210e275aeccf4e8d30e8ebe44b57f7cfa10d5cda3a93a58f260a07e2e6e1bc6147a91f2aafd7bd360ebcb4c57ecb660dc582cacb4f8fda058a7929dc388cd21134a0b10ff18f707cc510c24cedababdf46a621aa180238f0015a1e2d00dac328f56ecd8883665e6822e9bca1e9730843d4cbd8de5528e05cd2ccda9292a21271b", {0x3d0, 0xe1, 0x20303159, 0x4, 0x8, 0x2, 0x1, 0x1}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r4, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000280)=0x3000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x20}}, 0x0) 14:05:46 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xccff0000}, 0x20020045) [ 490.279890][T30162] input: syz0 as /devices/virtual/input/input83 14:05:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) 14:05:46 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xd8ff0000}, 0x20020045) 14:05:46 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:46 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:46 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:46 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r2, r1) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) 14:05:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x20}}, 0x0) 14:05:46 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xdcff0000}, 0x20020045) [ 490.769368][T30198] input: syz0 as /devices/virtual/input/input84 14:05:46 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r2, r1) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) 14:05:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) 14:05:46 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xe4000000}, 0x20020045) 14:05:46 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x9, 0xf, 0x0, "ebdcf1d6d0adc4d4e649d5944788a6ec99053d780c7e5d679d6ac47e6b65bb54", 0x34324d59}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r4, r3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r7, 0x6}, 0x8) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:46 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:46 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 14:05:47 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r2, r1) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) 14:05:47 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xe4ffffff}, 0x20020045) 14:05:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x20}}, 0x0) [ 491.312280][T30242] sctp: [Deprecated]: syz-executor.2 (pid 30242) Use of struct sctp_assoc_value in delayed_ack socket option. [ 491.312280][T30242] Use struct sctp_sack_info instead 14:05:47 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 14:05:47 executing program 0: syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:47 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) 14:05:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x20}}, 0x0) 14:05:47 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xe8030000}, 0x20020045) 14:05:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xdedb088af0d2b8fd, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffe, 0x8000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r1, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x5d) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) shmget(0x3, 0x1000, 0x2c000a86, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000500)) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r4, r3) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000540)={0x697adc31f6fede90, 0x199483f738cb8739, 0x1, 0x9, 0x1f}) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000300)=""/64, 0x40}], 0x3) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000003c0)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000340)={@mcast1, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000600)={0x2c, 0x4, r5, 0x6}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000640)="5ee9b3d889011db422157e5199fd88683305be694646f8a4c1c3d6084cf98aec11dfb756f3f6725ccb3550fb5bb7a3f3e0cd97a24c0c6890a712cb38f83e74dbf3ed9e", 0x43}, {&(0x7f00000006c0)="7ac33c8e9a434315ecf17a9de85baa1da1b3623a36a2c7b247c0c732277e74e0463aebf7e51fbf6ca54bed6b2e907ecb87d2410a2ee47105921c339c7c40aec5017597fe042cab1d2e7a1742685f266caf59825dfe03ec8a1c7f07da8b60b15644ba828eb6cbd61a75e048168a03caa4a1931d18662749b5d2a0f26c4f01158588cac692a8a1a7a2bb55107917fc54b5ab30452c35bb9ba529919d66aad1b20d2759f0ea97726e5fc8c72d97d2", 0xad}, {&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000880)="84dc1acfc09f4e483360830faf1f6abfdadb8c27eaafab710046da78575ddb7682232ff0d253cecbbfae229ee33661880da5af2f302d9c31cfddc46548b316650966e72470b3e166ce4f007cfd9ae4366b274ada80c025e10809aa84bdb2386060b141b62dbdbc1a1f", 0x69}, {&(0x7f0000000900)="3465b426d8fca4a5e8ab70e4ddf344828a4efef19393039cd7575726f2285389d7fff6974e72e8c76acdb8a9d9316981c0c0769e539780a2684c345529bdc74918e09ccf3837aa25e92a15dbb8131b2c5fe471c89af1f4b86d526f833311e0af03fd88da12cb1ddaeecd934e0e9f604a2eb8bdd2fd91545b35e2bbfd5d0fc86d", 0x80}, {&(0x7f0000001680)="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", 0xffb}], 0x18f, 0x0, 0x0, 0x24004841}, 0x20008000) socket$inet_udplite(0x2, 0x2, 0x88) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xdd408ecc4a2ff45f, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x0, 0xf}}, 0x20) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000001c0)={[], 0x9c, 0x92, 0x0, 0x8}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x20c080, 0x0) write$binfmt_script(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f617564696f00202f6465762f6d69641126e928db4748a2817580e2d1ecb483b101c5a436c993d25b87b680480add8396dd54ebd9812735c342ae5f8b0c65d6d2a4e49808050a4e3735359df515d90a788868e4ae28c0513d6296ba871ea4aff1bcd8131821e387c3e2fb087c69da363c4acb44b090abdadceb27d7add64f45f005386860875660760c4f990f0eaab699f6e007e6bff947f8950bee04f99043d536fcb420cb108088c520fbd96db09c3dfbd5a3"], 0xd2) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, &(0x7f00000004c0), 0x0) socket(0x10, 0x2, 0x0) 14:05:47 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) 14:05:47 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 14:05:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x20}}, 0x0) 14:05:47 executing program 0: syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:47 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xec030000}, 0x20020045) 14:05:47 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) 14:05:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}, 0x20}}, 0x0) 14:05:47 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$cec(0x0, 0x2, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r7 = accept4$alg(r5, 0x0, 0x0, 0x0) sendfile(r7, r6, 0x0, 0x1000) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000080)) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1}, 0x20020045) 14:05:48 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$cec(0x0, 0x2, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r7 = accept4$alg(r5, 0x0, 0x0, 0x0) sendfile(r7, r6, 0x0, 0x1000) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000080)) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1}, 0x20020045) 14:05:48 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf0000000}, 0x20020045) 14:05:48 executing program 0: syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:48 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) 14:05:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}, 0x20}}, 0x0) 14:05:48 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf0030000}, 0x20020045) 14:05:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x20}}, 0x0) 14:05:48 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:48 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) 14:05:48 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf1030000}, 0x20020045) 14:05:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}}, 0x0) 14:05:48 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) 14:05:49 executing program 5 (fault-call:0 fault-nth:0): syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:49 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$cec(0x0, 0x2, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r7 = accept4$alg(r5, 0x0, 0x0, 0x0) sendfile(r7, r6, 0x0, 0x1000) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000080)) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1}, 0x20020045) 14:05:49 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:49 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf2030000}, 0x20020045) 14:05:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}, 0x20}}, 0x0) 14:05:49 executing program 4: socket$inet(0x2, 0x2000080001, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) 14:05:49 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf3030000}, 0x20020045) [ 493.179516][T30371] FAULT_INJECTION: forcing a failure. [ 493.179516][T30371] name failslab, interval 1, probability 0, space 0, times 0 [ 493.227940][T30373] input: syz0 as /devices/virtual/input/input88 [ 493.265690][T30371] CPU: 1 PID: 30371 Comm: syz-executor.5 Not tainted 5.4.0-rc8-syzkaller #0 [ 493.274419][T30371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.284492][T30371] Call Trace: [ 493.287850][T30371] dump_stack+0x197/0x210 [ 493.292224][T30371] should_fail.cold+0xa/0x15 [ 493.296847][T30371] ? fault_create_debugfs_attr+0x180/0x180 [ 493.302729][T30371] ? ___might_sleep+0x163/0x2c0 [ 493.307612][T30371] __should_failslab+0x121/0x190 [ 493.312574][T30371] should_failslab+0x9/0x14 [ 493.312589][T30371] kmem_cache_alloc+0x2aa/0x710 [ 493.312612][T30371] ? __kasan_check_write+0x14/0x20 [ 493.322568][T30371] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 493.322587][T30371] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 493.322607][T30371] getname_flags+0xd6/0x5b0 [ 493.322623][T30371] getname+0x1a/0x20 [ 493.322635][T30371] do_sys_open+0x2c9/0x5d0 [ 493.322649][T30371] ? filp_open+0x80/0x80 [ 493.322672][T30371] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 493.361170][T30371] ? do_fast_syscall_32+0xd1/0xdb3 [ 493.366394][T30371] ? entry_SYSENTER_compat+0x70/0x7f [ 493.371892][T30371] ? do_fast_syscall_32+0xd1/0xdb3 14:05:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}}, 0x20}}, 0x0) 14:05:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) [ 493.377025][T30371] __ia32_compat_sys_open+0x79/0xb0 [ 493.382397][T30371] do_fast_syscall_32+0x27b/0xdb3 [ 493.382421][T30371] entry_SYSENTER_compat+0x70/0x7f [ 493.382435][T30371] RIP: 0023:0xf7f93a39 [ 493.382450][T30371] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 493.382458][T30371] RSP: 002b:00000000f5d8ec14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 14:05:49 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf4010000}, 0x20020045) [ 493.382470][T30371] RAX: ffffffffffffffda RBX: 00000000f5d8eccc RCX: 0000000000000000 [ 493.382477][T30371] RDX: 0000000000000000 RSI: 00000000f5d8eccc RDI: 0000000000000000 [ 493.382484][T30371] RBP: 00000000f5d8f168 R08: 0000000000000000 R09: 0000000000000000 [ 493.382491][T30371] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 493.382498][T30371] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:05:49 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}, 0x20}}, 0x0) 14:05:49 executing program 5 (fault-call:0 fault-nth:1): syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 493.863440][T30406] FAULT_INJECTION: forcing a failure. [ 493.863440][T30406] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 493.876962][T30406] CPU: 1 PID: 30406 Comm: syz-executor.5 Not tainted 5.4.0-rc8-syzkaller #0 [ 493.885753][T30406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.895835][T30406] Call Trace: [ 493.899158][T30406] dump_stack+0x197/0x210 [ 493.903528][T30406] should_fail.cold+0xa/0x15 [ 493.908166][T30406] ? fault_create_debugfs_attr+0x180/0x180 [ 493.914003][T30406] ? __kasan_check_read+0x11/0x20 [ 493.919070][T30406] ? __lock_acquire+0x16f2/0x4a00 [ 493.924126][T30406] should_fail_alloc_page+0x50/0x60 [ 493.929544][T30406] __alloc_pages_nodemask+0x1a1/0x900 [ 493.934943][T30406] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 493.940609][T30406] ? __alloc_pages_slowpath+0x2920/0x2920 [ 493.941938][T30411] FAULT_INJECTION: forcing a failure. [ 493.941938][T30411] name failslab, interval 1, probability 0, space 0, times 0 [ 493.946346][T30406] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 493.946374][T30406] ? fault_create_debugfs_attr+0x180/0x180 [ 493.946394][T30406] cache_grow_begin+0x90/0xd20 [ 493.946411][T30406] ? getname_flags+0xd6/0x5b0 [ 493.946432][T30406] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 493.986215][T30406] kmem_cache_alloc+0x64e/0x710 [ 493.991091][T30406] ? __kasan_check_write+0x14/0x20 [ 493.996230][T30406] getname_flags+0xd6/0x5b0 [ 494.000747][T30406] getname+0x1a/0x20 [ 494.004641][T30406] do_sys_open+0x2c9/0x5d0 [ 494.009070][T30406] ? filp_open+0x80/0x80 [ 494.013342][T30406] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 494.018815][T30406] ? do_fast_syscall_32+0xd1/0xdb3 [ 494.023941][T30406] ? entry_SYSENTER_compat+0x70/0x7f [ 494.029245][T30406] ? do_fast_syscall_32+0xd1/0xdb3 [ 494.034459][T30406] __ia32_compat_sys_open+0x79/0xb0 [ 494.039675][T30406] do_fast_syscall_32+0x27b/0xdb3 [ 494.044722][T30406] entry_SYSENTER_compat+0x70/0x7f [ 494.049923][T30406] RIP: 0023:0xf7f93a39 [ 494.053998][T30406] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 494.073639][T30406] RSP: 002b:00000000f5d8ec14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 494.082074][T30406] RAX: ffffffffffffffda RBX: 00000000f5d8eccc RCX: 0000000000000000 [ 494.090061][T30406] RDX: 0000000000000000 RSI: 00000000f5d8eccc RDI: 0000000000000000 [ 494.098049][T30406] RBP: 00000000f5d8f168 R08: 0000000000000000 R09: 0000000000000000 [ 494.106035][T30406] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 14:05:49 executing program 2 (fault-call:1 fault-nth:0): setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:05:49 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) 14:05:49 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf4030000}, 0x20020045) 14:05:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5b2}}, 0x20}}, 0x0) 14:05:49 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) 14:05:49 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) 14:05:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) [ 494.114023][T30406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 494.122031][T30411] CPU: 0 PID: 30411 Comm: syz-executor.2 Not tainted 5.4.0-rc8-syzkaller #0 [ 494.130734][T30411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.140788][T30411] Call Trace: [ 494.140814][T30411] dump_stack+0x197/0x210 [ 494.140836][T30411] should_fail.cold+0xa/0x15 [ 494.140851][T30411] ? fault_create_debugfs_attr+0x180/0x180 [ 494.140873][T30411] ? ___might_sleep+0x163/0x2c0 [ 494.140894][T30411] __should_failslab+0x121/0x190 [ 494.140910][T30411] should_failslab+0x9/0x14 [ 494.140921][T30411] kmem_cache_alloc+0x2aa/0x710 [ 494.140932][T30411] ? __kasan_check_write+0x14/0x20 [ 494.140947][T30411] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 494.140962][T30411] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 494.140983][T30411] getname_flags+0xd6/0x5b0 [ 494.179302][T30411] getname+0x1a/0x20 [ 494.179318][T30411] do_sys_open+0x2c9/0x5d0 [ 494.179335][T30411] ? filp_open+0x80/0x80 [ 494.190026][T30411] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 494.190044][T30411] ? do_fast_syscall_32+0xd1/0xdb3 [ 494.190065][T30411] ? entry_SYSENTER_compat+0x70/0x7f [ 494.190077][T30411] ? do_fast_syscall_32+0xd1/0xdb3 [ 494.190098][T30411] __ia32_compat_sys_open+0x79/0xb0 [ 494.243479][T30411] do_fast_syscall_32+0x27b/0xdb3 [ 494.248547][T30411] entry_SYSENTER_compat+0x70/0x7f [ 494.253686][T30411] RIP: 0023:0xf7f89a39 [ 494.257775][T30411] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 494.277503][T30411] RSP: 002b:00000000f5d84c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 494.277520][T30411] RAX: ffffffffffffffda RBX: 00000000f5d84ccc RCX: 0000000000000000 [ 494.277533][T30411] RDX: 0000000000000000 RSI: 00000000f5d84ccc RDI: 0000000000000000 [ 494.277539][T30411] RBP: 00000000f5d85168 R08: 0000000000000000 R09: 0000000000000000 14:05:50 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf8030000}, 0x20020045) 14:05:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}, 0x20}}, 0x0) [ 494.277546][T30411] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 494.277554][T30411] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 494.342166][T30424] input: syz0 as /devices/virtual/input/input90 14:05:50 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) 14:05:50 executing program 5 (fault-call:0 fault-nth:2): syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:50 executing program 2 (fault-call:1 fault-nth:1): setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:05:50 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf8ff0100}, 0x20020045) [ 494.642006][T30448] FAULT_INJECTION: forcing a failure. [ 494.642006][T30448] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 494.655249][T30448] CPU: 1 PID: 30448 Comm: syz-executor.2 Not tainted 5.4.0-rc8-syzkaller #0 [ 494.655262][T30448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.655269][T30448] Call Trace: [ 494.655296][T30448] dump_stack+0x197/0x210 [ 494.655323][T30448] should_fail.cold+0xa/0x15 [ 494.655346][T30448] ? fault_create_debugfs_attr+0x180/0x180 [ 494.655364][T30448] ? __kasan_check_read+0x11/0x20 [ 494.655378][T30448] ? __lock_acquire+0x16f2/0x4a00 [ 494.655400][T30448] should_fail_alloc_page+0x50/0x60 [ 494.707663][T30448] __alloc_pages_nodemask+0x1a1/0x900 [ 494.713039][T30448] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 494.718659][T30448] ? __alloc_pages_slowpath+0x2920/0x2920 [ 494.724367][T30448] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 494.729991][T30448] ? fault_create_debugfs_attr+0x180/0x180 [ 494.735797][T30448] cache_grow_begin+0x90/0xd20 [ 494.740548][T30448] ? getname_flags+0xd6/0x5b0 [ 494.745222][T30448] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 494.751452][T30448] kmem_cache_alloc+0x64e/0x710 [ 494.756289][T30448] ? __kasan_check_write+0x14/0x20 [ 494.761393][T30448] getname_flags+0xd6/0x5b0 [ 494.765883][T30448] getname+0x1a/0x20 [ 494.769765][T30448] do_sys_open+0x2c9/0x5d0 [ 494.774171][T30448] ? filp_open+0x80/0x80 [ 494.778403][T30448] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 494.783846][T30448] ? do_fast_syscall_32+0xd1/0xdb3 [ 494.788962][T30448] ? entry_SYSENTER_compat+0x70/0x7f [ 494.794240][T30448] ? do_fast_syscall_32+0xd1/0xdb3 [ 494.799354][T30448] __ia32_compat_sys_open+0x79/0xb0 [ 494.804558][T30448] do_fast_syscall_32+0x27b/0xdb3 [ 494.809571][T30448] entry_SYSENTER_compat+0x70/0x7f [ 494.814677][T30448] RIP: 0023:0xf7f89a39 [ 494.818750][T30448] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 14:05:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}}, 0x20}}, 0x0) 14:05:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) [ 494.838349][T30448] RSP: 002b:00000000f5d84c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 494.846764][T30448] RAX: ffffffffffffffda RBX: 00000000f5d84ccc RCX: 0000000000000000 [ 494.854740][T30448] RDX: 0000000000000000 RSI: 00000000f5d84ccc RDI: 0000000000000000 [ 494.862700][T30448] RBP: 00000000f5d85168 R08: 0000000000000000 R09: 0000000000000000 [ 494.870679][T30448] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 494.878640][T30448] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 494.917398][T30454] FAULT_INJECTION: forcing a failure. [ 494.917398][T30454] name failslab, interval 1, probability 0, space 0, times 0 [ 494.961295][T30454] CPU: 0 PID: 30454 Comm: syz-executor.5 Not tainted 5.4.0-rc8-syzkaller #0 [ 494.970119][T30454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.980192][T30454] Call Trace: [ 494.983515][T30454] dump_stack+0x197/0x210 [ 494.987873][T30454] should_fail.cold+0xa/0x15 [ 494.992491][T30454] ? fault_create_debugfs_attr+0x180/0x180 [ 494.998348][T30454] ? ___might_sleep+0x163/0x2c0 [ 495.003225][T30454] __should_failslab+0x121/0x190 14:05:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}}, 0x20}}, 0x0) [ 495.008180][T30454] should_failslab+0x9/0x14 [ 495.012694][T30454] kmem_cache_alloc+0x2aa/0x710 [ 495.017562][T30454] ? stack_trace_save+0xac/0xe0 [ 495.022433][T30454] ? stack_trace_consume_entry+0x190/0x190 [ 495.028258][T30454] __alloc_file+0x27/0x340 [ 495.032703][T30454] alloc_empty_file+0x72/0x170 [ 495.037511][T30454] path_openat+0xef/0x46d0 [ 495.041945][T30454] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 495.047767][T30454] ? kasan_slab_alloc+0xf/0x20 [ 495.052544][T30454] ? kmem_cache_alloc+0x121/0x710 [ 495.057585][T30454] ? getname_flags+0xd6/0x5b0 [ 495.062284][T30454] ? getname+0x1a/0x20 [ 495.066370][T30454] ? do_sys_open+0x2c9/0x5d0 [ 495.070963][T30454] ? __ia32_compat_sys_open+0x79/0xb0 [ 495.076349][T30454] ? __kasan_check_read+0x11/0x20 [ 495.081388][T30454] ? mark_lock+0xc2/0x1220 [ 495.085833][T30454] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 495.091505][T30454] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 495.096895][T30454] ? __alloc_fd+0x487/0x620 [ 495.101409][T30454] do_filp_open+0x1a1/0x280 [ 495.105918][T30454] ? may_open_dev+0x100/0x100 [ 495.110597][T30454] ? lock_downgrade+0x920/0x920 [ 495.115441][T30454] ? rwlock_bug.part.0+0x90/0x90 [ 495.120374][T30454] ? do_raw_spin_unlock+0x178/0x270 [ 495.125581][T30454] ? _raw_spin_unlock+0x2d/0x50 [ 495.130418][T30454] ? __alloc_fd+0x487/0x620 [ 495.134917][T30454] do_sys_open+0x3fe/0x5d0 [ 495.139321][T30454] ? filp_open+0x80/0x80 [ 495.143557][T30454] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 495.149008][T30454] ? do_fast_syscall_32+0xd1/0xdb3 [ 495.154474][T30454] ? entry_SYSENTER_compat+0x70/0x7f [ 495.159750][T30454] ? do_fast_syscall_32+0xd1/0xdb3 [ 495.169203][T30454] __ia32_compat_sys_open+0x79/0xb0 [ 495.174432][T30454] do_fast_syscall_32+0x27b/0xdb3 [ 495.179466][T30454] entry_SYSENTER_compat+0x70/0x7f [ 495.184565][T30454] RIP: 0023:0xf7f93a39 [ 495.188623][T30454] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 14:05:51 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xf9030000}, 0x20020045) [ 495.208335][T30454] RSP: 002b:00000000f5d8ec14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 495.216747][T30454] RAX: ffffffffffffffda RBX: 00000000f5d8eccc RCX: 0000000000000000 [ 495.224746][T30454] RDX: 0000000000000000 RSI: 00000000f5d8eccc RDI: 0000000000000000 [ 495.232850][T30454] RBP: 00000000f5d8f168 R08: 0000000000000000 R09: 0000000000000000 [ 495.240845][T30454] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 495.248903][T30454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:05:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}}, 0x20}}, 0x0) 14:05:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) 14:05:51 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xfa030000}, 0x20020045) [ 495.433338][T30458] input: syz0 as /devices/virtual/input/input91 14:05:51 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) 14:05:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}}, 0x20}}, 0x0) 14:05:51 executing program 2 (fault-call:1 fault-nth:2): setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:05:51 executing program 5 (fault-call:0 fault-nth:3): syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:51 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xfca00000}, 0x20020045) 14:05:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}}, 0x20}}, 0x0) 14:05:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x3cc}], 0x1}, 0x20020045) 14:05:51 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 495.876770][T30506] FAULT_INJECTION: forcing a failure. [ 495.876770][T30506] name failslab, interval 1, probability 0, space 0, times 0 [ 495.901254][T30506] CPU: 0 PID: 30506 Comm: syz-executor.5 Not tainted 5.4.0-rc8-syzkaller #0 [ 495.909975][T30506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.920044][T30506] Call Trace: [ 495.923361][T30506] dump_stack+0x197/0x210 [ 495.927737][T30506] should_fail.cold+0xa/0x15 [ 495.932350][T30506] ? fault_create_debugfs_attr+0x180/0x180 [ 495.938177][T30506] ? ___might_sleep+0x163/0x2c0 [ 495.943050][T30506] __should_failslab+0x121/0x190 [ 495.948017][T30506] should_failslab+0x9/0x14 [ 495.952546][T30506] kmem_cache_alloc+0x2aa/0x710 [ 495.957413][T30506] ? kmem_cache_alloc+0x364/0x710 [ 495.962569][T30506] security_file_alloc+0x39/0x170 [ 495.967615][T30506] __alloc_file+0xde/0x340 [ 495.972048][T30506] alloc_empty_file+0x72/0x170 14:05:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, 0x0, 0x20020045) [ 495.977010][T30506] path_openat+0xef/0x46d0 [ 495.981446][T30506] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 495.987264][T30506] ? kasan_slab_alloc+0xf/0x20 [ 495.992047][T30506] ? kmem_cache_alloc+0x121/0x710 [ 495.997080][T30506] ? getname_flags+0xd6/0x5b0 [ 496.001774][T30506] ? getname+0x1a/0x20 [ 496.005850][T30506] ? do_sys_open+0x2c9/0x5d0 [ 496.010465][T30506] ? __ia32_compat_sys_open+0x79/0xb0 [ 496.015849][T30506] ? __kasan_check_read+0x11/0x20 [ 496.020885][T30506] ? mark_lock+0xc2/0x1220 [ 496.024878][T30513] FAULT_INJECTION: forcing a failure. [ 496.024878][T30513] name failslab, interval 1, probability 0, space 0, times 0 [ 496.025314][T30506] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 496.043436][T30506] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 496.048828][T30506] ? __alloc_fd+0x487/0x620 [ 496.053357][T30506] do_filp_open+0x1a1/0x280 [ 496.057885][T30506] ? may_open_dev+0x100/0x100 [ 496.062559][T30506] ? lock_downgrade+0x920/0x920 [ 496.062574][T30506] ? rwlock_bug.part.0+0x90/0x90 [ 496.062591][T30506] ? do_raw_spin_unlock+0x178/0x270 [ 496.062610][T30506] ? _raw_spin_unlock+0x2d/0x50 [ 496.062623][T30506] ? __alloc_fd+0x487/0x620 [ 496.062645][T30506] do_sys_open+0x3fe/0x5d0 [ 496.062659][T30506] ? filp_open+0x80/0x80 [ 496.062679][T30506] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 496.062693][T30506] ? do_fast_syscall_32+0xd1/0xdb3 [ 496.062705][T30506] ? entry_SYSENTER_compat+0x70/0x7f [ 496.062716][T30506] ? do_fast_syscall_32+0xd1/0xdb3 [ 496.062739][T30506] __ia32_compat_sys_open+0x79/0xb0 [ 496.121835][T30506] do_fast_syscall_32+0x27b/0xdb3 14:05:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, 0x0, 0x20020045) [ 496.126879][T30506] entry_SYSENTER_compat+0x70/0x7f [ 496.132002][T30506] RIP: 0023:0xf7f93a39 [ 496.136089][T30506] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 496.155707][T30506] RSP: 002b:00000000f5d8ec14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 496.164136][T30506] RAX: ffffffffffffffda RBX: 00000000f5d8eccc RCX: 0000000000000000 [ 496.172126][T30506] RDX: 0000000000000000 RSI: 00000000f5d8eccc RDI: 0000000000000000 [ 496.180287][T30506] RBP: 00000000f5d8f168 R08: 0000000000000000 R09: 0000000000000000 [ 496.188280][T30506] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 496.196299][T30506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 496.205489][T30513] CPU: 1 PID: 30513 Comm: syz-executor.2 Not tainted 5.4.0-rc8-syzkaller #0 [ 496.214196][T30513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.224262][T30513] Call Trace: [ 496.227576][T30513] dump_stack+0x197/0x210 [ 496.231961][T30513] should_fail.cold+0xa/0x15 [ 496.236564][T30513] ? fault_create_debugfs_attr+0x180/0x180 [ 496.242388][T30513] ? ___might_sleep+0x163/0x2c0 [ 496.247250][T30513] __should_failslab+0x121/0x190 [ 496.252189][T30513] should_failslab+0x9/0x14 [ 496.252204][T30513] kmem_cache_alloc+0x2aa/0x710 [ 496.252223][T30513] ? stack_trace_save+0xac/0xe0 [ 496.252238][T30513] ? stack_trace_consume_entry+0x190/0x190 [ 496.252255][T30513] __alloc_file+0x27/0x340 [ 496.252274][T30513] alloc_empty_file+0x72/0x170 [ 496.261620][T30513] path_openat+0xef/0x46d0 [ 496.261638][T30513] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 496.261649][T30513] ? kasan_slab_alloc+0xf/0x20 [ 496.261660][T30513] ? kmem_cache_alloc+0x121/0x710 [ 496.261680][T30513] ? getname_flags+0xd6/0x5b0 [ 496.272333][T30513] ? getname+0x1a/0x20 [ 496.272346][T30513] ? do_sys_open+0x2c9/0x5d0 [ 496.272356][T30513] ? __ia32_compat_sys_open+0x79/0xb0 [ 496.272373][T30513] ? __kasan_check_read+0x11/0x20 [ 496.272392][T30513] ? mark_lock+0xc2/0x1220 [ 496.276802][T30506] input: syz0 as /devices/virtual/input/input94 [ 496.281555][T30513] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 496.281574][T30513] ? __alloc_fd+0x487/0x620 [ 496.281594][T30513] do_filp_open+0x1a1/0x280 [ 496.291949][T30513] ? may_open_dev+0x100/0x100 [ 496.291970][T30513] ? lock_downgrade+0x920/0x920 [ 496.291984][T30513] ? rwlock_bug.part.0+0x90/0x90 [ 496.292002][T30513] ? do_raw_spin_unlock+0x178/0x270 [ 496.292022][T30513] ? _raw_spin_unlock+0x2d/0x50 [ 496.292047][T30513] ? __alloc_fd+0x487/0x620 [ 496.292066][T30513] do_sys_open+0x3fe/0x5d0 [ 496.292081][T30513] ? filp_open+0x80/0x80 [ 496.388640][T30513] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 496.394115][T30513] ? do_fast_syscall_32+0xd1/0xdb3 [ 496.399244][T30513] ? entry_SYSENTER_compat+0x70/0x7f [ 496.404547][T30513] ? do_fast_syscall_32+0xd1/0xdb3 [ 496.409691][T30513] __ia32_compat_sys_open+0x79/0xb0 [ 496.414914][T30513] do_fast_syscall_32+0x27b/0xdb3 [ 496.419965][T30513] entry_SYSENTER_compat+0x70/0x7f [ 496.425091][T30513] RIP: 0023:0xf7f89a39 [ 496.429176][T30513] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 496.448793][T30513] RSP: 002b:00000000f5d84c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 496.457572][T30513] RAX: ffffffffffffffda RBX: 00000000f5d84ccc RCX: 0000000000000000 [ 496.465735][T30513] RDX: 0000000000000000 RSI: 00000000f5d84ccc RDI: 0000000000000000 14:05:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, 0x0, 0x20020045) 14:05:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, 0x20}}, 0x0) 14:05:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}}, 0x20}}, 0x0) 14:05:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1}], 0x1}, 0x20020045) [ 496.473723][T30513] RBP: 00000000f5d85168 R08: 0000000000000000 R09: 0000000000000000 [ 496.481708][T30513] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 496.489803][T30513] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:05:52 executing program 2 (fault-call:1 fault-nth:3): setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:05:52 executing program 5 (fault-call:0 fault-nth:4): syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}, 0x20}}, 0x0) 14:05:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:05:52 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xfcff0000}, 0x20020045) 14:05:52 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x0) 14:05:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6558}}, 0x20}}, 0x0) [ 496.728534][T30543] FAULT_INJECTION: forcing a failure. [ 496.728534][T30543] name failslab, interval 1, probability 0, space 0, times 0 [ 496.752494][T30547] FAULT_INJECTION: forcing a failure. [ 496.752494][T30547] name failslab, interval 1, probability 0, space 0, times 0 [ 496.777554][T30547] CPU: 1 PID: 30547 Comm: syz-executor.5 Not tainted 5.4.0-rc8-syzkaller #0 [ 496.786272][T30547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.796338][T30547] Call Trace: [ 496.796375][T30547] dump_stack+0x197/0x210 [ 496.796400][T30547] should_fail.cold+0xa/0x15 [ 496.796422][T30547] ? fault_create_debugfs_attr+0x180/0x180 [ 496.796446][T30547] ? ___might_sleep+0x163/0x2c0 [ 496.796469][T30547] __should_failslab+0x121/0x190 [ 496.824797][T30547] should_failslab+0x9/0x14 [ 496.829311][T30547] __kmalloc+0x2e0/0x770 [ 496.833544][T30547] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 496.839686][T30547] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 496.845656][T30547] tomoyo_realpath_from_path+0xcd/0x7b0 [ 496.851193][T30547] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 496.857426][T30547] tomoyo_check_open_permission+0x2a8/0x3f0 [ 496.863304][T30547] ? cache_grow_begin.cold+0x21/0x2f [ 496.868613][T30547] ? tomoyo_path_number_perm+0x520/0x520 [ 496.874256][T30547] ? __kasan_check_read+0x11/0x20 [ 496.879283][T30547] ? mark_lock+0xc2/0x1220 [ 496.883698][T30547] ? lock_downgrade+0x920/0x920 [ 496.888533][T30547] ? rwlock_bug.part.0+0x90/0x90 [ 496.893464][T30547] tomoyo_file_open+0xa9/0xd0 [ 496.898130][T30547] security_file_open+0x71/0x300 [ 496.903058][T30547] do_dentry_open+0x37a/0x1380 [ 496.907805][T30547] ? __kasan_check_read+0x11/0x20 [ 496.912827][T30547] ? chown_common+0x5c0/0x5c0 [ 496.917495][T30547] ? inode_permission+0xb4/0x560 [ 496.922445][T30547] vfs_open+0xa0/0xd0 [ 496.926497][T30547] path_openat+0x10e9/0x46d0 [ 496.931154][T30547] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 496.936943][T30547] ? kasan_slab_alloc+0xf/0x20 [ 496.941702][T30547] ? kmem_cache_alloc+0x121/0x710 [ 496.946707][T30547] ? getname_flags+0xd6/0x5b0 [ 496.951366][T30547] ? getname+0x1a/0x20 [ 496.955418][T30547] ? do_sys_open+0x2c9/0x5d0 [ 496.960004][T30547] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 496.965379][T30547] ? __alloc_fd+0x487/0x620 [ 496.969974][T30547] do_filp_open+0x1a1/0x280 [ 496.974479][T30547] ? may_open_dev+0x100/0x100 [ 496.979155][T30547] ? do_raw_spin_unlock+0x178/0x270 [ 496.984365][T30547] ? _raw_spin_unlock+0x2d/0x50 [ 496.989196][T30547] ? __alloc_fd+0x487/0x620 [ 496.993704][T30547] do_sys_open+0x3fe/0x5d0 [ 496.998106][T30547] ? filp_open+0x80/0x80 [ 497.002354][T30547] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 497.007808][T30547] ? do_fast_syscall_32+0xd1/0xdb3 [ 497.012904][T30547] ? entry_SYSENTER_compat+0x70/0x7f [ 497.018178][T30547] ? do_fast_syscall_32+0xd1/0xdb3 [ 497.023294][T30547] __ia32_compat_sys_open+0x79/0xb0 [ 497.028496][T30547] do_fast_syscall_32+0x27b/0xdb3 [ 497.033527][T30547] entry_SYSENTER_compat+0x70/0x7f [ 497.038634][T30547] RIP: 0023:0xf7f93a39 [ 497.042708][T30547] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 497.062306][T30547] RSP: 002b:00000000f5d8ec14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 497.070712][T30547] RAX: ffffffffffffffda RBX: 00000000f5d8eccc RCX: 0000000000000000 14:05:53 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xfeffffff}, 0x20020045) [ 497.078682][T30547] RDX: 0000000000000000 RSI: 00000000f5d8eccc RDI: 0000000000000000 [ 497.086641][T30547] RBP: 00000000f5d8f168 R08: 0000000000000000 R09: 0000000000000000 [ 497.094608][T30547] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 497.102565][T30547] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.142661][T30543] CPU: 1 PID: 30543 Comm: syz-executor.2 Not tainted 5.4.0-rc8-syzkaller #0 [ 497.151393][T30543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.161899][T30543] Call Trace: [ 497.165210][T30543] dump_stack+0x197/0x210 [ 497.169547][T30543] should_fail.cold+0xa/0x15 [ 497.174139][T30543] ? fault_create_debugfs_attr+0x180/0x180 [ 497.179945][T30543] ? ___might_sleep+0x163/0x2c0 [ 497.184797][T30543] __should_failslab+0x121/0x190 [ 497.189752][T30543] should_failslab+0x9/0x14 [ 497.194285][T30543] __kmalloc+0x2e0/0x770 [ 497.198537][T30543] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 497.204717][T30543] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 497.210442][T30543] tomoyo_realpath_from_path+0xcd/0x7b0 [ 497.215988][T30543] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 497.222219][T30543] tomoyo_check_open_permission+0x2a8/0x3f0 [ 497.228095][T30543] ? cache_grow_begin.cold+0x21/0x2f [ 497.233365][T30543] ? tomoyo_path_number_perm+0x520/0x520 [ 497.238989][T30543] ? __kasan_check_read+0x11/0x20 [ 497.244002][T30543] ? mark_lock+0xc2/0x1220 [ 497.248426][T30543] ? lock_downgrade+0x920/0x920 [ 497.253424][T30543] ? rwlock_bug.part.0+0x90/0x90 [ 497.258392][T30543] tomoyo_file_open+0xa9/0xd0 [ 497.263088][T30543] security_file_open+0x71/0x300 [ 497.268024][T30543] do_dentry_open+0x37a/0x1380 [ 497.272775][T30543] ? __kasan_check_read+0x11/0x20 [ 497.277806][T30543] ? chown_common+0x5c0/0x5c0 [ 497.282480][T30543] ? inode_permission+0xb4/0x560 [ 497.287447][T30543] vfs_open+0xa0/0xd0 [ 497.291419][T30543] path_openat+0x10e9/0x46d0 [ 497.296001][T30543] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 497.301805][T30543] ? kasan_slab_alloc+0xf/0x20 [ 497.306654][T30543] ? kmem_cache_alloc+0x121/0x710 [ 497.311684][T30543] ? getname_flags+0xd6/0x5b0 [ 497.316439][T30543] ? getname+0x1a/0x20 [ 497.320536][T30543] ? do_sys_open+0x2c9/0x5d0 [ 497.325282][T30543] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 497.330669][T30543] ? __alloc_fd+0x487/0x620 [ 497.335178][T30543] do_filp_open+0x1a1/0x280 [ 497.339677][T30543] ? may_open_dev+0x100/0x100 [ 497.344362][T30543] ? do_raw_spin_unlock+0x178/0x270 [ 497.349563][T30543] ? _raw_spin_unlock+0x2d/0x50 [ 497.354400][T30543] ? __alloc_fd+0x487/0x620 [ 497.358900][T30543] do_sys_open+0x3fe/0x5d0 [ 497.363644][T30543] ? filp_open+0x80/0x80 [ 497.367919][T30543] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 497.373411][T30543] ? do_fast_syscall_32+0xd1/0xdb3 [ 497.378534][T30543] ? entry_SYSENTER_compat+0x70/0x7f [ 497.383842][T30543] ? do_fast_syscall_32+0xd1/0xdb3 [ 497.388994][T30543] __ia32_compat_sys_open+0x79/0xb0 [ 497.394227][T30543] do_fast_syscall_32+0x27b/0xdb3 [ 497.399269][T30543] entry_SYSENTER_compat+0x70/0x7f [ 497.404434][T30543] RIP: 0023:0xf7f89a39 [ 497.408502][T30543] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 497.428249][T30543] RSP: 002b:00000000f5d84c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 497.437021][T30543] RAX: ffffffffffffffda RBX: 00000000f5d84ccc RCX: 0000000000000000 [ 497.445164][T30543] RDX: 0000000000000000 RSI: 00000000f5d84ccc RDI: 0000000000000000 [ 497.453160][T30543] RBP: 00000000f5d85168 R08: 0000000000000000 R09: 0000000000000000 [ 497.461158][T30543] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 497.469294][T30543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:05:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x0) 14:05:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}}, 0x20}}, 0x0) 14:05:53 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xffffff7f}, 0x20020045) [ 497.590306][T30547] ERROR: Out of memory at tomoyo_realpath_from_path. [ 497.625785][T30562] input: syz0 as /devices/virtual/input/input95 [ 497.798240][T30543] ERROR: Out of memory at tomoyo_realpath_from_path. 14:05:53 executing program 2 (fault-call:1 fault-nth:4): setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:05:53 executing program 5 (fault-call:0 fault-nth:5): syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:53 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x0) 14:05:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb205}}, 0x20}}, 0x0) 14:05:53 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xffffffe4}, 0x20020045) 14:05:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}}, 0x20}}, 0x0) 14:05:53 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0xfffffffe}, 0x20020045) [ 498.038776][T30593] FAULT_INJECTION: forcing a failure. [ 498.038776][T30593] name failslab, interval 1, probability 0, space 0, times 0 [ 498.054196][T30594] FAULT_INJECTION: forcing a failure. [ 498.054196][T30594] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 498.067438][T30594] CPU: 0 PID: 30594 Comm: syz-executor.5 Not tainted 5.4.0-rc8-syzkaller #0 [ 498.076132][T30594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.086210][T30594] Call Trace: [ 498.086247][T30594] dump_stack+0x197/0x210 [ 498.086275][T30594] should_fail.cold+0xa/0x15 [ 498.086291][T30594] ? __kasan_check_read+0x11/0x20 [ 498.086308][T30594] ? fault_create_debugfs_attr+0x180/0x180 [ 498.086328][T30594] ? is_bpf_text_address+0xac/0x170 [ 498.086350][T30594] ? find_held_lock+0x35/0x130 [ 498.086378][T30594] should_fail_alloc_page+0x50/0x60 [ 498.086397][T30594] __alloc_pages_nodemask+0x1a1/0x900 [ 498.103704][T30594] ? lock_downgrade+0x920/0x920 [ 498.103726][T30594] ? __alloc_pages_slowpath+0x2920/0x2920 [ 498.103740][T30594] ? __kasan_check_read+0x11/0x20 [ 498.103765][T30594] ? fault_create_debugfs_attr+0x180/0x180 [ 498.134904][T30594] cache_grow_begin+0x90/0xd20 [ 498.156166][T30594] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 498.156185][T30594] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 498.156205][T30594] __kmalloc+0x6b2/0x770 [ 498.156226][T30594] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 498.178561][T30594] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 498.184328][T30594] tomoyo_realpath_from_path+0xcd/0x7b0 [ 498.189909][T30594] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 498.196191][T30594] tomoyo_check_open_permission+0x2a8/0x3f0 [ 498.202195][T30594] ? cache_grow_begin.cold+0x21/0x2f [ 498.207582][T30594] ? tomoyo_path_number_perm+0x520/0x520 [ 498.213228][T30594] ? __kasan_check_read+0x11/0x20 [ 498.218275][T30594] ? mark_lock+0xc2/0x1220 [ 498.222750][T30594] ? lock_downgrade+0x920/0x920 [ 498.227612][T30594] ? rwlock_bug.part.0+0x90/0x90 [ 498.232566][T30594] tomoyo_file_open+0xa9/0xd0 14:05:54 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1}, 0x20020045) [ 498.237260][T30594] security_file_open+0x71/0x300 [ 498.242215][T30594] do_dentry_open+0x37a/0x1380 [ 498.246990][T30594] ? __kasan_check_read+0x11/0x20 [ 498.252058][T30594] ? chown_common+0x5c0/0x5c0 [ 498.256857][T30594] ? inode_permission+0xb4/0x560 [ 498.261822][T30594] vfs_open+0xa0/0xd0 [ 498.265874][T30594] path_openat+0x10e9/0x46d0 [ 498.270493][T30594] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 498.276326][T30594] ? kasan_slab_alloc+0xf/0x20 [ 498.281129][T30594] ? kmem_cache_alloc+0x121/0x710 [ 498.286263][T30594] ? getname_flags+0xd6/0x5b0 [ 498.290974][T30594] ? getname+0x1a/0x20 [ 498.295169][T30594] ? do_sys_open+0x2c9/0x5d0 [ 498.299886][T30594] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 498.305300][T30594] ? __alloc_fd+0x487/0x620 [ 498.309840][T30594] do_filp_open+0x1a1/0x280 [ 498.314372][T30594] ? may_open_dev+0x100/0x100 [ 498.319090][T30594] ? do_raw_spin_unlock+0x178/0x270 [ 498.324313][T30594] ? _raw_spin_unlock+0x2d/0x50 [ 498.329369][T30594] ? __alloc_fd+0x487/0x620 [ 498.333925][T30594] do_sys_open+0x3fe/0x5d0 [ 498.338449][T30594] ? filp_open+0x80/0x80 [ 498.342718][T30594] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 498.348203][T30594] ? do_fast_syscall_32+0xd1/0xdb3 [ 498.353338][T30594] ? entry_SYSENTER_compat+0x70/0x7f [ 498.358644][T30594] ? do_fast_syscall_32+0xd1/0xdb3 [ 498.363791][T30594] __ia32_compat_sys_open+0x79/0xb0 [ 498.369015][T30594] do_fast_syscall_32+0x27b/0xdb3 [ 498.374052][T30594] entry_SYSENTER_compat+0x70/0x7f [ 498.379155][T30594] RIP: 0023:0xf7f93a39 [ 498.383222][T30594] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 498.402850][T30594] RSP: 002b:00000000f5d8ec14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 498.411319][T30594] RAX: ffffffffffffffda RBX: 00000000f5d8eccc RCX: 0000000000000000 [ 498.419338][T30594] RDX: 0000000000000000 RSI: 00000000f5d8eccc RDI: 0000000000000000 [ 498.427331][T30594] RBP: 00000000f5d8f168 R08: 0000000000000000 R09: 0000000000000000 14:05:54 executing program 4 (fault-call:1 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) [ 498.435325][T30594] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 498.443331][T30594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 498.464631][T30593] CPU: 1 PID: 30593 Comm: syz-executor.2 Not tainted 5.4.0-rc8-syzkaller #0 [ 498.473718][T30593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.483800][T30593] Call Trace: [ 498.487127][T30593] dump_stack+0x197/0x210 [ 498.491496][T30593] should_fail.cold+0xa/0x15 [ 498.496554][T30593] ? fault_create_debugfs_attr+0x180/0x180 [ 498.502408][T30593] ? ___might_sleep+0x163/0x2c0 [ 498.502434][T30593] __should_failslab+0x121/0x190 [ 498.512238][T30593] should_failslab+0x9/0x14 [ 498.516752][T30593] __kmalloc+0x2e0/0x770 [ 498.516771][T30593] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 498.516793][T30593] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 498.516810][T30593] tomoyo_realpath_from_path+0xcd/0x7b0 [ 498.516831][T30593] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 498.532939][T30593] tomoyo_check_open_permission+0x2a8/0x3f0 [ 498.550594][T30593] ? cache_grow_begin.cold+0x21/0x2f [ 498.555899][T30593] ? tomoyo_path_number_perm+0x520/0x520 [ 498.555929][T30593] ? __kasan_check_read+0x11/0x20 [ 498.555946][T30593] ? mark_lock+0xc2/0x1220 [ 498.555974][T30593] ? lock_downgrade+0x920/0x920 [ 498.576052][T30593] ? rwlock_bug.part.0+0x90/0x90 [ 498.578776][T30611] input: syz0 as /devices/virtual/input/input98 [ 498.581015][T30593] tomoyo_file_open+0xa9/0xd0 [ 498.581034][T30593] security_file_open+0x71/0x300 [ 498.581055][T30593] do_dentry_open+0x37a/0x1380 [ 498.581070][T30593] ? __kasan_check_read+0x11/0x20 [ 498.581088][T30593] ? chown_common+0x5c0/0x5c0 [ 498.581109][T30593] ? inode_permission+0xb4/0x560 [ 498.597128][T30593] vfs_open+0xa0/0xd0 [ 498.597149][T30593] path_openat+0x10e9/0x46d0 [ 498.597165][T30593] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 498.597176][T30593] ? kasan_slab_alloc+0xf/0x20 [ 498.597193][T30593] ? kmem_cache_alloc+0x121/0x710 [ 498.640943][T30593] ? getname_flags+0xd6/0x5b0 [ 498.645647][T30593] ? getname+0x1a/0x20 [ 498.649719][T30593] ? do_sys_open+0x2c9/0x5d0 [ 498.654349][T30593] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 498.659745][T30593] ? __alloc_fd+0x487/0x620 [ 498.664288][T30593] do_filp_open+0x1a1/0x280 [ 498.668822][T30593] ? may_open_dev+0x100/0x100 [ 498.673538][T30593] ? do_raw_spin_unlock+0x178/0x270 [ 498.678766][T30593] ? _raw_spin_unlock+0x2d/0x50 [ 498.683632][T30593] ? __alloc_fd+0x487/0x620 [ 498.683658][T30593] do_sys_open+0x3fe/0x5d0 [ 498.683674][T30593] ? filp_open+0x80/0x80 [ 498.683696][T30593] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 498.683711][T30593] ? do_fast_syscall_32+0xd1/0xdb3 [ 498.683734][T30593] ? entry_SYSENTER_compat+0x70/0x7f [ 498.692645][T30593] ? do_fast_syscall_32+0xd1/0xdb3 [ 498.692664][T30593] __ia32_compat_sys_open+0x79/0xb0 [ 498.692683][T30593] do_fast_syscall_32+0x27b/0xdb3 [ 498.692704][T30593] entry_SYSENTER_compat+0x70/0x7f [ 498.692715][T30593] RIP: 0023:0xf7f89a39 14:05:54 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x2}, 0x20020045) 14:05:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}}, 0x20}}, 0x0) [ 498.692731][T30593] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 498.692738][T30593] RSP: 002b:00000000f5d84c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 498.717888][T30593] RAX: ffffffffffffffda RBX: 00000000f5d84ccc RCX: 0000000000000000 [ 498.717898][T30593] RDX: 0000000000000000 RSI: 00000000f5d84ccc RDI: 0000000000000000 [ 498.717907][T30593] RBP: 00000000f5d85168 R08: 0000000000000000 R09: 0000000000000000 [ 498.717915][T30593] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 498.717930][T30593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 498.833350][T30593] ERROR: Out of memory at tomoyo_realpath_from_path. 14:05:54 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:05:54 executing program 5 (fault-call:0 fault-nth:6): syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:05:54 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}}, 0x20}}, 0x0) 14:05:54 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x3}, 0x20020045) 14:05:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:05:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}}, 0x20}}, 0x0) 14:05:55 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x4}, 0x20020045) 14:05:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x4, 0x0}, 0x20020045) 14:05:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, 0x20}}, 0x0) 14:05:55 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 499.178983][T30647] input: syz0 as /devices/virtual/input/input99 [ 499.248154][T30644] FAULT_INJECTION: forcing a failure. [ 499.248154][T30644] name failslab, interval 1, probability 0, space 0, times 0 [ 499.331069][T30644] CPU: 1 PID: 30644 Comm: syz-executor.5 Not tainted 5.4.0-rc8-syzkaller #0 [ 499.339809][T30644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.349902][T30644] Call Trace: [ 499.353245][T30644] dump_stack+0x197/0x210 [ 499.357628][T30644] should_fail.cold+0xa/0x15 [ 499.362268][T30644] ? fault_create_debugfs_attr+0x180/0x180 [ 499.368243][T30644] ? ___might_sleep+0x163/0x2c0 [ 499.373140][T30644] __should_failslab+0x121/0x190 [ 499.378103][T30644] should_failslab+0x9/0x14 [ 499.382627][T30644] __kmalloc+0x2e0/0x770 [ 499.386886][T30644] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 499.393228][T30644] ? d_absolute_path+0x11b/0x170 [ 499.398196][T30644] ? __d_path+0x140/0x140 [ 499.402535][T30644] ? tomoyo_encode2.part.0+0xf5/0x400 [ 499.407921][T30644] tomoyo_encode2.part.0+0xf5/0x400 [ 499.413294][T30644] tomoyo_encode+0x2b/0x50 [ 499.413308][T30644] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 499.413322][T30644] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 499.413342][T30644] tomoyo_check_open_permission+0x2a8/0x3f0 [ 499.413358][T30644] ? cache_grow_begin.cold+0x21/0x2f [ 499.413370][T30644] ? tomoyo_path_number_perm+0x520/0x520 [ 499.413393][T30644] ? __kasan_check_read+0x11/0x20 [ 499.451988][T30644] ? mark_lock+0xc2/0x1220 [ 499.456448][T30644] ? lock_downgrade+0x920/0x920 [ 499.461311][T30644] ? rwlock_bug.part.0+0x90/0x90 [ 499.466270][T30644] tomoyo_file_open+0xa9/0xd0 [ 499.470962][T30644] security_file_open+0x71/0x300 [ 499.475924][T30644] do_dentry_open+0x37a/0x1380 [ 499.480694][T30644] ? __kasan_check_read+0x11/0x20 [ 499.485738][T30644] ? chown_common+0x5c0/0x5c0 [ 499.490461][T30644] ? inode_permission+0xb4/0x560 [ 499.495422][T30644] vfs_open+0xa0/0xd0 [ 499.499425][T30644] path_openat+0x10e9/0x46d0 [ 499.504065][T30644] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 499.510162][T30644] ? kasan_slab_alloc+0xf/0x20 [ 499.515044][T30644] ? kmem_cache_alloc+0x121/0x710 [ 499.520100][T30644] ? getname_flags+0xd6/0x5b0 [ 499.524800][T30644] ? getname+0x1a/0x20 [ 499.528885][T30644] ? do_sys_open+0x2c9/0x5d0 [ 499.533514][T30644] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 499.538913][T30644] ? __alloc_fd+0x487/0x620 [ 499.543444][T30644] do_filp_open+0x1a1/0x280 [ 499.548001][T30644] ? may_open_dev+0x100/0x100 [ 499.552711][T30644] ? do_raw_spin_unlock+0x178/0x270 [ 499.557928][T30644] ? _raw_spin_unlock+0x2d/0x50 [ 499.562805][T30644] ? __alloc_fd+0x487/0x620 [ 499.567520][T30644] do_sys_open+0x3fe/0x5d0 [ 499.571965][T30644] ? filp_open+0x80/0x80 [ 499.576234][T30644] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 499.581817][T30644] ? do_fast_syscall_32+0xd1/0xdb3 [ 499.586945][T30644] ? entry_SYSENTER_compat+0x70/0x7f [ 499.592254][T30644] ? do_fast_syscall_32+0xd1/0xdb3 [ 499.597376][T30644] __ia32_compat_sys_open+0x79/0xb0 [ 499.602742][T30644] do_fast_syscall_32+0x27b/0xdb3 [ 499.607777][T30644] entry_SYSENTER_compat+0x70/0x7f [ 499.613044][T30644] RIP: 0023:0xf7f93a39 [ 499.617108][T30644] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 499.636954][T30644] RSP: 002b:00000000f5d8ec14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 499.645369][T30644] RAX: ffffffffffffffda RBX: 00000000f5d8eccc RCX: 0000000000000000 [ 499.653339][T30644] RDX: 0000000000000000 RSI: 00000000f5d8eccc RDI: 0000000000000000 [ 499.661308][T30644] RBP: 00000000f5d8f168 R08: 0000000000000000 R09: 0000000000000000 [ 499.669272][T30644] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 14:05:55 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='\\dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 499.677241][T30644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 499.685849][T30644] ERROR: Out of memory at tomoyo_realpath_from_path. 14:05:55 executing program 5 (fault-call:0 fault-nth:7): syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:55 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x5}, 0x20020045) 14:05:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x3e80, 0x0}, 0x20020045) 14:05:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x20}}, 0x0) 14:05:55 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/.ev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:05:55 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x803e, 0x0}, 0x20020045) 14:05:55 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='//ev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:05:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}, 0x20}}, 0x0) [ 499.927559][T30687] FAULT_INJECTION: forcing a failure. [ 499.927559][T30687] name failslab, interval 1, probability 0, space 0, times 0 14:05:55 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x6}, 0x20020045) [ 499.976769][T30690] input: syz0 as /devices/virtual/input/input103 [ 500.099448][T30687] CPU: 1 PID: 30687 Comm: syz-executor.5 Not tainted 5.4.0-rc8-syzkaller #0 [ 500.108172][T30687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.118244][T30687] Call Trace: [ 500.121569][T30687] dump_stack+0x197/0x210 [ 500.125929][T30687] should_fail.cold+0xa/0x15 [ 500.130654][T30687] ? fault_create_debugfs_attr+0x180/0x180 [ 500.136487][T30687] ? ___might_sleep+0x163/0x2c0 [ 500.136516][T30687] __should_failslab+0x121/0x190 [ 500.146459][T30687] should_failslab+0x9/0x14 [ 500.151030][T30687] kmem_cache_alloc_trace+0x2d3/0x790 [ 500.156420][T30687] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 500.161997][T30687] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 500.167996][T30687] ? integrity_kernel_module_request+0x39/0x45 [ 500.174168][T30687] __request_module+0x33d/0xbab [ 500.174187][T30687] ? find_held_lock+0x35/0x130 [ 500.174204][T30687] ? base_probe+0x31/0x70 [ 500.174222][T30687] ? free_modprobe_argv+0xa0/0xa0 [ 500.188326][T30687] ? lock_downgrade+0x920/0x920 [ 500.198256][T30687] ? kobj_lookup+0x29b/0x460 [ 500.202883][T30687] ? mutex_trylock+0x2d0/0x2d0 [ 500.207663][T30687] ? __kasan_check_write+0x14/0x20 [ 500.207681][T30687] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 500.207698][T30687] ? chrdev_open+0x2d4/0x6b0 [ 500.207721][T30687] base_probe+0x31/0x70 [ 500.227976][T30687] kobj_lookup+0x260/0x460 [ 500.232446][T30687] ? exact_match+0x20/0x20 [ 500.236908][T30687] chrdev_open+0x318/0x6b0 [ 500.241366][T30687] ? cdev_put.part.0+0x50/0x50 [ 500.246148][T30687] ? security_file_open+0x87/0x300 [ 500.251291][T30687] do_dentry_open+0x4e6/0x1380 [ 500.251307][T30687] ? __kasan_check_read+0x11/0x20 [ 500.251324][T30687] ? cdev_put.part.0+0x50/0x50 [ 500.251340][T30687] ? chown_common+0x5c0/0x5c0 [ 500.251356][T30687] ? inode_permission+0xb4/0x560 [ 500.251378][T30687] vfs_open+0xa0/0xd0 [ 500.251395][T30687] path_openat+0x10e9/0x46d0 [ 500.251406][T30687] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 500.251418][T30687] ? kasan_slab_alloc+0xf/0x20 [ 500.251428][T30687] ? kmem_cache_alloc+0x121/0x710 [ 500.251445][T30687] ? getname_flags+0xd6/0x5b0 [ 500.265993][T30687] ? getname+0x1a/0x20 [ 500.266007][T30687] ? do_sys_open+0x2c9/0x5d0 [ 500.266034][T30687] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 500.279617][T30687] ? __alloc_fd+0x487/0x620 [ 500.279648][T30687] do_filp_open+0x1a1/0x280 [ 500.290031][T30687] ? may_open_dev+0x100/0x100 [ 500.290058][T30687] ? do_raw_spin_unlock+0x178/0x270 [ 500.308682][T30687] ? _raw_spin_unlock+0x2d/0x50 [ 500.318618][T30687] ? __alloc_fd+0x487/0x620 14:05:56 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:56 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/\\ev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 500.318649][T30687] do_sys_open+0x3fe/0x5d0 [ 500.318675][T30687] ? filp_open+0x80/0x80 [ 500.327665][T30687] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 500.327683][T30687] ? do_fast_syscall_32+0xd1/0xdb3 [ 500.327698][T30687] ? entry_SYSENTER_compat+0x70/0x7f [ 500.327709][T30687] ? do_fast_syscall_32+0xd1/0xdb3 [ 500.327727][T30687] __ia32_compat_sys_open+0x79/0xb0 [ 500.361015][T30687] do_fast_syscall_32+0x27b/0xdb3 [ 500.361045][T30687] entry_SYSENTER_compat+0x70/0x7f [ 500.381807][T30687] RIP: 0023:0xf7f93a39 [ 500.381824][T30687] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 500.381831][T30687] RSP: 002b:00000000f5d8ec14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 500.381846][T30687] RAX: ffffffffffffffda RBX: 00000000f5d8eccc RCX: 0000000000000000 [ 500.381855][T30687] RDX: 0000000000000000 RSI: 00000000f5d8eccc RDI: 0000000000000000 [ 500.381863][T30687] RBP: 00000000f5d8f168 R08: 0000000000000000 R09: 0000000000000000 [ 500.381872][T30687] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 500.381883][T30687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:05:56 executing program 5 (fault-call:0 fault-nth:8): syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:56 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x7}, 0x20020045) 14:05:56 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/d%v/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:05:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, 0x20}}, 0x0) 14:05:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x40000, 0x0}, 0x20020045) 14:05:56 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}}, 0x20}}, 0x0) [ 500.673027][T30726] FAULT_INJECTION: forcing a failure. [ 500.673027][T30726] name failslab, interval 1, probability 0, space 0, times 0 [ 500.706795][T30726] CPU: 1 PID: 30726 Comm: syz-executor.5 Not tainted 5.4.0-rc8-syzkaller #0 [ 500.715630][T30726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.725948][T30726] Call Trace: [ 500.729287][T30726] dump_stack+0x197/0x210 [ 500.733654][T30726] should_fail.cold+0xa/0x15 [ 500.738309][T30726] ? fault_create_debugfs_attr+0x180/0x180 [ 500.744175][T30726] ? ___might_sleep+0x163/0x2c0 [ 500.749056][T30726] __should_failslab+0x121/0x190 [ 500.754017][T30726] should_failslab+0x9/0x14 [ 500.758540][T30726] kmem_cache_alloc_trace+0x2d3/0x790 [ 500.763932][T30726] ? __kmalloc_track_caller+0x5f8/0x760 [ 500.769502][T30726] call_usermodehelper_setup+0x9b/0x320 [ 500.775064][T30726] ? dec_ucount+0x250/0x250 [ 500.779584][T30726] __request_module+0x456/0xbab [ 500.784448][T30726] ? find_held_lock+0x35/0x130 [ 500.784468][T30726] ? base_probe+0x31/0x70 [ 500.784480][T30726] ? free_modprobe_argv+0xa0/0xa0 [ 500.784496][T30726] ? lock_downgrade+0x920/0x920 [ 500.784508][T30726] ? lockdep_hardirqs_on+0x421/0x5e0 [ 500.784521][T30726] ? retint_kernel+0x2b/0x2b [ 500.784544][T30726] ? __kasan_check_write+0x14/0x20 [ 500.818438][T30726] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 500.824010][T30726] ? retint_kernel+0x2b/0x2b [ 500.828911][T30726] base_probe+0x31/0x70 [ 500.833096][T30726] kobj_lookup+0x260/0x460 [ 500.837539][T30726] ? exact_match+0x20/0x20 [ 500.841982][T30726] chrdev_open+0x318/0x6b0 [ 500.846422][T30726] ? cdev_put.part.0+0x50/0x50 [ 500.851208][T30726] ? security_file_open+0x87/0x300 [ 500.856337][T30726] do_dentry_open+0x4e6/0x1380 [ 500.861115][T30726] ? __kasan_check_read+0x11/0x20 [ 500.866156][T30726] ? cdev_put.part.0+0x50/0x50 [ 500.870938][T30726] ? chown_common+0x5c0/0x5c0 [ 500.875622][T30726] ? inode_permission+0xb4/0x560 [ 500.880563][T30726] vfs_open+0xa0/0xd0 [ 500.884542][T30726] path_openat+0x10e9/0x46d0 [ 500.884557][T30726] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 500.884566][T30726] ? kasan_slab_alloc+0xf/0x20 [ 500.884577][T30726] ? kmem_cache_alloc+0x121/0x710 [ 500.884595][T30726] ? getname_flags+0xd6/0x5b0 [ 500.909413][T30726] ? getname+0x1a/0x20 [ 500.913497][T30726] ? do_sys_open+0x2c9/0x5d0 [ 500.918124][T30726] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 500.923523][T30726] ? __alloc_fd+0x487/0x620 [ 500.930401][T30726] do_filp_open+0x1a1/0x280 [ 500.934923][T30726] ? may_open_dev+0x100/0x100 [ 500.939627][T30726] ? do_raw_spin_unlock+0x178/0x270 [ 500.944864][T30726] ? _raw_spin_unlock+0x2d/0x50 [ 500.949741][T30726] ? __alloc_fd+0x487/0x620 [ 500.954274][T30726] do_sys_open+0x3fe/0x5d0 [ 500.958715][T30726] ? filp_open+0x80/0x80 [ 500.962982][T30726] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 500.968482][T30726] ? do_fast_syscall_32+0xd1/0xdb3 14:05:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}}, 0x20}}, 0x0) 14:05:56 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x8}, 0x20020045) 14:05:56 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x9}, 0x20020045) 14:05:56 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xa}, 0x20020045) [ 500.973614][T30726] ? entry_SYSENTER_compat+0x70/0x7f [ 500.978910][T30726] ? do_fast_syscall_32+0xd1/0xdb3 [ 500.984035][T30726] __ia32_compat_sys_open+0x79/0xb0 [ 500.989245][T30726] do_fast_syscall_32+0x27b/0xdb3 [ 500.994271][T30726] entry_SYSENTER_compat+0x70/0x7f [ 500.994284][T30726] RIP: 0023:0xf7f93a39 [ 500.994297][T30726] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 14:05:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x803e0000, 0x0}, 0x20020045) [ 500.994309][T30726] RSP: 002b:00000000f5d8ec14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 501.023072][T30726] RAX: ffffffffffffffda RBX: 00000000f5d8eccc RCX: 0000000000000000 [ 501.023082][T30726] RDX: 0000000000000000 RSI: 00000000f5d8eccc RDI: 0000000000000000 [ 501.023089][T30726] RBP: 00000000f5d8f168 R08: 0000000000000000 R09: 0000000000000000 [ 501.023096][T30726] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 501.023103][T30726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 501.098023][T30726] input: syz0 as /devices/virtual/input/input108 14:05:57 executing program 5 (fault-call:0 fault-nth:9): syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:57 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/d.v/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:05:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}}, 0x20}}, 0x0) 14:05:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0xffffff7f, 0x0}, 0x20020045) 14:05:57 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xc}, 0x20020045) 14:05:57 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}}, 0x20}}, 0x0) 14:05:57 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/d/v/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:05:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:05:57 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xe}, 0x20020045) [ 501.482418][T30773] FAULT_INJECTION: forcing a failure. [ 501.482418][T30773] name failslab, interval 1, probability 0, space 0, times 0 [ 501.571734][T30773] CPU: 1 PID: 30773 Comm: syz-executor.5 Not tainted 5.4.0-rc8-syzkaller #0 [ 501.580472][T30773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.590533][T30773] Call Trace: [ 501.593830][T30773] dump_stack+0x197/0x210 [ 501.598157][T30773] should_fail.cold+0xa/0x15 [ 501.602741][T30773] ? fault_create_debugfs_attr+0x180/0x180 [ 501.608545][T30773] ? ___might_sleep+0x163/0x2c0 [ 501.613386][T30773] __should_failslab+0x121/0x190 [ 501.618396][T30773] should_failslab+0x9/0x14 [ 501.622886][T30773] kmem_cache_alloc_trace+0x2d3/0x790 [ 501.628265][T30773] ? __kmalloc_track_caller+0x5f8/0x760 [ 501.633815][T30773] call_usermodehelper_setup+0x9b/0x320 [ 501.639344][T30773] ? dec_ucount+0x250/0x250 [ 501.643896][T30773] __request_module+0x456/0xbab [ 501.648788][T30773] ? find_held_lock+0x35/0x130 [ 501.653555][T30773] ? base_probe+0x31/0x70 [ 501.657881][T30773] ? free_modprobe_argv+0xa0/0xa0 [ 501.662901][T30773] ? lock_downgrade+0x920/0x920 [ 501.667741][T30773] ? kobj_lookup+0x29b/0x460 [ 501.672322][T30773] ? mutex_trylock+0x2d0/0x2d0 [ 501.677074][T30773] ? __kasan_check_write+0x14/0x20 [ 501.682184][T30773] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 501.687712][T30773] ? chrdev_open+0x2d4/0x6b0 [ 501.692297][T30773] base_probe+0x31/0x70 [ 501.696449][T30773] kobj_lookup+0x260/0x460 [ 501.700858][T30773] ? exact_match+0x20/0x20 [ 501.705262][T30773] chrdev_open+0x318/0x6b0 [ 501.709668][T30773] ? cdev_put.part.0+0x50/0x50 [ 501.714425][T30773] ? security_file_open+0x87/0x300 [ 501.719537][T30773] do_dentry_open+0x4e6/0x1380 [ 501.724299][T30773] ? __kasan_check_read+0x11/0x20 [ 501.729308][T30773] ? cdev_put.part.0+0x50/0x50 [ 501.734059][T30773] ? chown_common+0x5c0/0x5c0 [ 501.738735][T30773] ? inode_permission+0xb4/0x560 [ 501.743679][T30773] vfs_open+0xa0/0xd0 [ 501.747647][T30773] path_openat+0x10e9/0x46d0 [ 501.752221][T30773] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 501.758019][T30773] ? kasan_slab_alloc+0xf/0x20 [ 501.762782][T30773] ? kmem_cache_alloc+0x121/0x710 [ 501.767790][T30773] ? getname_flags+0xd6/0x5b0 [ 501.772450][T30773] ? getname+0x1a/0x20 [ 501.776501][T30773] ? do_sys_open+0x2c9/0x5d0 [ 501.781088][T30773] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 501.786450][T30773] ? __alloc_fd+0x487/0x620 [ 501.790946][T30773] do_filp_open+0x1a1/0x280 [ 501.795435][T30773] ? may_open_dev+0x100/0x100 [ 501.800110][T30773] ? do_raw_spin_unlock+0x178/0x270 [ 501.805298][T30773] ? _raw_spin_unlock+0x2d/0x50 [ 501.810132][T30773] ? __alloc_fd+0x487/0x620 [ 501.814629][T30773] do_sys_open+0x3fe/0x5d0 [ 501.819033][T30773] ? filp_open+0x80/0x80 [ 501.823269][T30773] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 501.828892][T30773] ? do_fast_syscall_32+0xd1/0xdb3 [ 501.834000][T30773] ? entry_SYSENTER_compat+0x70/0x7f [ 501.839280][T30773] ? do_fast_syscall_32+0xd1/0xdb3 [ 501.844384][T30773] __ia32_compat_sys_open+0x79/0xb0 [ 501.849575][T30773] do_fast_syscall_32+0x27b/0xdb3 [ 501.854595][T30773] entry_SYSENTER_compat+0x70/0x7f [ 501.859693][T30773] RIP: 0023:0xf7f93a39 [ 501.863757][T30773] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 501.883346][T30773] RSP: 002b:00000000f5d8ec14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 501.891845][T30773] RAX: ffffffffffffffda RBX: 00000000f5d8eccc RCX: 0000000000000000 [ 501.899817][T30773] RDX: 0000000000000000 RSI: 00000000f5d8eccc RDI: 0000000000000000 [ 501.907777][T30773] RBP: 00000000f5d8f168 R08: 0000000000000000 R09: 0000000000000000 14:05:57 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x4}, 0x20020045) [ 501.915742][T30773] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 501.923702][T30773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.120309][T30773] input: syz0 as /devices/virtual/input/input111 14:05:58 executing program 5 (fault-call:0 fault-nth:10): syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}}, 0x20}}, 0x0) 14:05:58 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/d\\v/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:05:58 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf}, 0x20020045) 14:05:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x3e80}, 0x20020045) 14:05:58 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(0x0) dup2(0xffffffffffffffff, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x803e}, 0x20020045) 14:05:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}, 0x20}}, 0x0) 14:05:58 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/de\\/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 502.354661][T30813] input: syz0 as /devices/virtual/input/input113 [ 502.365165][T30808] FAULT_INJECTION: forcing a failure. [ 502.365165][T30808] name failslab, interval 1, probability 0, space 0, times 0 [ 502.434958][T30808] CPU: 1 PID: 30808 Comm: syz-executor.5 Not tainted 5.4.0-rc8-syzkaller #0 [ 502.443689][T30808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.453769][T30808] Call Trace: [ 502.457097][T30808] dump_stack+0x197/0x210 [ 502.461470][T30808] should_fail.cold+0xa/0x15 [ 502.466091][T30808] ? fault_create_debugfs_attr+0x180/0x180 [ 502.472066][T30808] ? ___might_sleep+0x163/0x2c0 [ 502.476940][T30808] __should_failslab+0x121/0x190 [ 502.481894][T30808] should_failslab+0x9/0x14 [ 502.486399][T30808] kmem_cache_alloc_trace+0x2d3/0x790 [ 502.486418][T30808] ? __kmalloc_track_caller+0x5f8/0x760 [ 502.486444][T30808] call_usermodehelper_setup+0x9b/0x320 [ 502.502975][T30808] ? dec_ucount+0x250/0x250 [ 502.507507][T30808] __request_module+0x456/0xbab [ 502.512375][T30808] ? find_held_lock+0x35/0x130 [ 502.517160][T30808] ? base_probe+0x59/0x70 [ 502.521504][T30808] ? free_modprobe_argv+0xa0/0xa0 [ 502.526741][T30808] ? lock_downgrade+0x920/0x920 [ 502.531609][T30808] ? kobj_lookup+0x29b/0x460 [ 502.536230][T30808] ? mutex_trylock+0x2d0/0x2d0 [ 502.541161][T30808] ? __kasan_check_write+0x14/0x20 [ 502.546292][T30808] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 502.551860][T30808] ? chrdev_open+0x2d4/0x6b0 [ 502.551887][T30808] base_probe+0x59/0x70 [ 502.551908][T30808] kobj_lookup+0x260/0x460 [ 502.551928][T30808] ? exact_match+0x20/0x20 [ 502.551943][T30808] chrdev_open+0x318/0x6b0 [ 502.551960][T30808] ? cdev_put.part.0+0x50/0x50 [ 502.551977][T30808] ? security_file_open+0x87/0x300 [ 502.552005][T30808] do_dentry_open+0x4e6/0x1380 [ 502.589647][T30808] ? __kasan_check_read+0x11/0x20 [ 502.594690][T30808] ? cdev_put.part.0+0x50/0x50 [ 502.599764][T30808] ? chown_common+0x5c0/0x5c0 [ 502.604479][T30808] ? inode_permission+0xb4/0x560 [ 502.609443][T30808] vfs_open+0xa0/0xd0 [ 502.613445][T30808] path_openat+0x10e9/0x46d0 [ 502.618236][T30808] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 502.624056][T30808] ? kasan_slab_alloc+0xf/0x20 [ 502.628847][T30808] ? kmem_cache_alloc+0x121/0x710 [ 502.633897][T30808] ? getname_flags+0xd6/0x5b0 [ 502.638704][T30808] ? getname+0x1a/0x20 [ 502.642779][T30808] ? do_sys_open+0x2c9/0x5d0 [ 502.647611][T30808] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 502.653010][T30808] ? __alloc_fd+0x487/0x620 [ 502.657545][T30808] do_filp_open+0x1a1/0x280 [ 502.662082][T30808] ? may_open_dev+0x100/0x100 [ 502.666975][T30808] ? do_raw_spin_unlock+0x178/0x270 [ 502.672196][T30808] ? _raw_spin_unlock+0x2d/0x50 [ 502.677061][T30808] ? __alloc_fd+0x487/0x620 [ 502.681582][T30808] do_sys_open+0x3fe/0x5d0 14:05:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x40000}, 0x20020045) 14:05:58 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x10}, 0x20020045) [ 502.681605][T30808] ? filp_open+0x80/0x80 [ 502.681624][T30808] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 502.681642][T30808] ? do_fast_syscall_32+0xd1/0xdb3 [ 502.701398][T30808] ? entry_SYSENTER_compat+0x70/0x7f [ 502.706707][T30808] ? do_fast_syscall_32+0xd1/0xdb3 [ 502.712000][T30808] __ia32_compat_sys_open+0x79/0xb0 [ 502.717333][T30808] do_fast_syscall_32+0x27b/0xdb3 [ 502.722397][T30808] entry_SYSENTER_compat+0x70/0x7f [ 502.727526][T30808] RIP: 0023:0xf7f93a39 14:05:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x803e0000}, 0x20020045) [ 502.731740][T30808] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 502.751364][T30808] RSP: 002b:00000000f5d8ec14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 502.759890][T30808] RAX: ffffffffffffffda RBX: 00000000f5d8eccc RCX: 0000000000000000 [ 502.767910][T30808] RDX: 0000000000000000 RSI: 00000000f5d8eccc RDI: 0000000000000000 [ 502.776054][T30808] RBP: 00000000f5d8f168 R08: 0000000000000000 R09: 0000000000000000 [ 502.776062][T30808] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 502.776069][T30808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:05:58 executing program 5 (fault-call:0 fault-nth:11): syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}, 0x20}}, 0x0) 14:05:58 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x18}, 0x20020045) 14:05:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0xffffff7f}, 0x20020045) 14:05:58 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev\\input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:05:58 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(0x0) dup2(0xffffffffffffffff, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:05:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x20}}, 0x0) 14:05:59 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/%nput/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:05:59 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x30}, 0x20020045) [ 503.181130][T30861] input: syz0 as /devices/virtual/input/input116 [ 503.294454][T30856] FAULT_INJECTION: forcing a failure. [ 503.294454][T30856] name failslab, interval 1, probability 0, space 0, times 0 [ 503.339759][T30856] CPU: 1 PID: 30856 Comm: syz-executor.5 Not tainted 5.4.0-rc8-syzkaller #0 [ 503.348521][T30856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.358725][T30856] Call Trace: [ 503.362047][T30856] dump_stack+0x197/0x210 [ 503.362075][T30856] should_fail.cold+0xa/0x15 [ 503.362099][T30856] ? fault_create_debugfs_attr+0x180/0x180 [ 503.376852][T30856] ? ___might_sleep+0x163/0x2c0 [ 503.381723][T30856] __should_failslab+0x121/0x190 [ 503.386670][T30856] should_failslab+0x9/0x14 [ 503.391188][T30856] __kmalloc+0x2e0/0x770 [ 503.395444][T30856] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 503.401247][T30856] ? lock_downgrade+0x920/0x920 [ 503.401340][T30856] ? evdev_open+0xf8/0x530 [ 503.401360][T30856] evdev_open+0xf8/0x530 [ 503.410606][T30856] ? kobject_put+0x84/0xe0 [ 503.419355][T30856] ? evdev_free+0x70/0x70 [ 503.423695][T30856] chrdev_open+0x245/0x6b0 [ 503.428133][T30856] ? cdev_put.part.0+0x50/0x50 [ 503.432907][T30856] ? security_file_open+0x87/0x300 14:05:59 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x44}, 0x20020045) [ 503.438063][T30856] do_dentry_open+0x4e6/0x1380 [ 503.442945][T30856] ? __kasan_check_read+0x11/0x20 [ 503.447987][T30856] ? cdev_put.part.0+0x50/0x50 [ 503.452859][T30856] ? chown_common+0x5c0/0x5c0 [ 503.457553][T30856] ? inode_permission+0xb4/0x560 [ 503.462519][T30856] vfs_open+0xa0/0xd0 [ 503.466549][T30856] path_openat+0x10e9/0x46d0 [ 503.471155][T30856] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 503.476975][T30856] ? kasan_slab_alloc+0xf/0x20 [ 503.481738][T30856] ? kmem_cache_alloc+0x121/0x710 [ 503.481752][T30856] ? getname_flags+0xd6/0x5b0 [ 503.481763][T30856] ? getname+0x1a/0x20 [ 503.481773][T30856] ? do_sys_open+0x2c9/0x5d0 [ 503.481800][T30856] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 503.495575][T30856] ? __alloc_fd+0x487/0x620 [ 503.495601][T30856] do_filp_open+0x1a1/0x280 [ 503.514567][T30856] ? may_open_dev+0x100/0x100 [ 503.519296][T30856] ? do_raw_spin_unlock+0x178/0x270 [ 503.524524][T30856] ? _raw_spin_unlock+0x2d/0x50 [ 503.529400][T30856] ? __alloc_fd+0x487/0x620 [ 503.533941][T30856] do_sys_open+0x3fe/0x5d0 [ 503.538496][T30856] ? filp_open+0x80/0x80 [ 503.542790][T30856] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 503.548281][T30856] ? do_fast_syscall_32+0xd1/0xdb3 [ 503.553382][T30856] ? entry_SYSENTER_compat+0x70/0x7f [ 503.558755][T30856] ? do_fast_syscall_32+0xd1/0xdb3 [ 503.563869][T30856] __ia32_compat_sys_open+0x79/0xb0 [ 503.569075][T30856] do_fast_syscall_32+0x27b/0xdb3 [ 503.574139][T30856] entry_SYSENTER_compat+0x70/0x7f [ 503.579244][T30856] RIP: 0023:0xf7f93a39 [ 503.583310][T30856] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 503.603259][T30856] RSP: 002b:00000000f5d8ec14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 503.612288][T30856] RAX: ffffffffffffffda RBX: 00000000f5d8eccc RCX: 0000000000000000 [ 503.620425][T30856] RDX: 0000000000000000 RSI: 00000000f5d8eccc RDI: 0000000000000000 [ 503.628387][T30856] RBP: 00000000f5d8f168 R08: 0000000000000000 R09: 0000000000000000 14:05:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20020045) [ 503.636767][T30856] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 503.644754][T30856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:05:59 executing program 5 (fault-call:0 fault-nth:12): syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:05:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}}, 0x20}}, 0x0) 14:05:59 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/.nput/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:05:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3e80}, 0x20020045) 14:05:59 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(0x0) dup2(0xffffffffffffffff, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:05:59 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x47}, 0x20020045) 14:05:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x65580000}}, 0x20}}, 0x0) 14:05:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x803e}, 0x20020045) 14:06:00 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev//nput/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 504.047239][T30909] input: syz0 as /devices/virtual/input/input120 14:06:00 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xe4}, 0x20020045) [ 504.095943][T30905] FAULT_INJECTION: forcing a failure. [ 504.095943][T30905] name failslab, interval 1, probability 0, space 0, times 0 [ 504.144537][T30905] CPU: 0 PID: 30905 Comm: syz-executor.5 Not tainted 5.4.0-rc8-syzkaller #0 [ 504.153285][T30905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.163466][T30905] Call Trace: [ 504.166791][T30905] dump_stack+0x197/0x210 [ 504.171156][T30905] should_fail.cold+0xa/0x15 [ 504.175782][T30905] ? fault_create_debugfs_attr+0x180/0x180 [ 504.181714][T30905] ? ___might_sleep+0x163/0x2c0 [ 504.186740][T30905] __should_failslab+0x121/0x190 14:06:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000}}, 0x20}}, 0x0) [ 504.191706][T30905] should_failslab+0x9/0x14 [ 504.196239][T30905] kmem_cache_alloc_trace+0x2d3/0x790 [ 504.201645][T30905] ? __kmalloc_track_caller+0x5f8/0x760 [ 504.207241][T30905] call_usermodehelper_setup+0x9b/0x320 [ 504.212805][T30905] ? dec_ucount+0x250/0x250 [ 504.217495][T30905] __request_module+0x456/0xbab [ 504.222375][T30905] ? find_held_lock+0x35/0x130 [ 504.227245][T30905] ? base_probe+0x59/0x70 [ 504.231595][T30905] ? free_modprobe_argv+0xa0/0xa0 [ 504.236652][T30905] ? lock_downgrade+0x920/0x920 [ 504.241557][T30905] ? kobj_lookup+0x29b/0x460 [ 504.247125][T30905] ? mutex_trylock+0x2d0/0x2d0 [ 504.251991][T30905] ? __kasan_check_write+0x14/0x20 [ 504.252007][T30905] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 504.252024][T30905] ? chrdev_open+0x2d4/0x6b0 [ 504.252046][T30905] base_probe+0x59/0x70 [ 504.252062][T30905] kobj_lookup+0x260/0x460 [ 504.252080][T30905] ? exact_match+0x20/0x20 [ 504.252098][T30905] chrdev_open+0x318/0x6b0 [ 504.276032][T30905] ? cdev_put.part.0+0x50/0x50 [ 504.276052][T30905] ? security_file_open+0x87/0x300 [ 504.276074][T30905] do_dentry_open+0x4e6/0x1380 [ 504.299537][T30905] ? __kasan_check_read+0x11/0x20 [ 504.304578][T30905] ? cdev_put.part.0+0x50/0x50 [ 504.304602][T30905] ? chown_common+0x5c0/0x5c0 [ 504.304624][T30905] ? inode_permission+0xb4/0x560 [ 504.319114][T30905] vfs_open+0xa0/0xd0 [ 504.323126][T30905] path_openat+0x10e9/0x46d0 [ 504.327736][T30905] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 504.333594][T30905] ? kasan_slab_alloc+0xf/0x20 [ 504.333607][T30905] ? kmem_cache_alloc+0x121/0x710 [ 504.333626][T30905] ? getname_flags+0xd6/0x5b0 [ 504.333637][T30905] ? getname+0x1a/0x20 [ 504.333647][T30905] ? do_sys_open+0x2c9/0x5d0 [ 504.333672][T30905] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 504.333691][T30905] ? __alloc_fd+0x487/0x620 [ 504.333713][T30905] do_filp_open+0x1a1/0x280 [ 504.333726][T30905] ? may_open_dev+0x100/0x100 [ 504.333751][T30905] ? do_raw_spin_unlock+0x178/0x270 [ 504.381320][T30905] ? _raw_spin_unlock+0x2d/0x50 [ 504.386190][T30905] ? __alloc_fd+0x487/0x620 [ 504.390824][T30905] do_sys_open+0x3fe/0x5d0 14:06:00 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf0}, 0x20020045) [ 504.395255][T30905] ? filp_open+0x80/0x80 [ 504.399518][T30905] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 504.404998][T30905] ? do_fast_syscall_32+0xd1/0xdb3 [ 504.410131][T30905] ? entry_SYSENTER_compat+0x70/0x7f [ 504.415443][T30905] ? do_fast_syscall_32+0xd1/0xdb3 [ 504.420577][T30905] __ia32_compat_sys_open+0x79/0xb0 [ 504.425850][T30905] do_fast_syscall_32+0x27b/0xdb3 [ 504.430886][T30905] entry_SYSENTER_compat+0x70/0x7f [ 504.430897][T30905] RIP: 0023:0xf7f93a39 [ 504.430911][T30905] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 504.430917][T30905] RSP: 002b:00000000f5d8ec14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 504.430930][T30905] RAX: ffffffffffffffda RBX: 00000000f5d8eccc RCX: 0000000000000000 [ 504.430937][T30905] RDX: 0000000000000000 RSI: 00000000f5d8eccc RDI: 0000000000000000 [ 504.430943][T30905] RBP: 00000000f5d8f168 R08: 0000000000000000 R09: 0000000000000000 [ 504.430950][T30905] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 504.430957][T30905] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:06:00 executing program 5 (fault-call:0 fault-nth:13): syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:00 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:00 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x108}, 0x20020045) 14:06:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff}}, 0x20}}, 0x0) 14:06:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x20020045) 14:06:00 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/\\nput/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x803e0000}, 0x20020045) 14:06:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}}, 0x20}}, 0x0) 14:06:00 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/i\\put/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 504.841029][T30952] input: syz0 as /devices/virtual/input/input123 14:06:00 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x124}, 0x20020045) 14:06:00 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x20020045) 14:06:01 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:01 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/in\\ut/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb2050000}}, 0x20}}, 0x0) 14:06:01 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x128}, 0x20020045) 14:06:01 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/inp\\t/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}}, 0x20}}, 0x0) [ 505.399409][T30990] input: syz0 as /devices/virtual/input/input126 14:06:01 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20020045) 14:06:01 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x12c}, 0x20020045) 14:06:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888}}, 0x20}}, 0x0) 14:06:01 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/inpu\\/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:01 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='\\dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:01 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input\\event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e80}, 0x20020045) 14:06:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}}, 0x20}}, 0x0) 14:06:01 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x138}, 0x20020045) 14:06:01 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}, 0x20}}, 0x0) 14:06:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803e}, 0x20020045) [ 505.975805][T31037] input: syz0 as /devices/virtual/input/input129 14:06:02 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/%vent#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}}, 0x20}}, 0x0) 14:06:02 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x1f4}, 0x20020045) 14:06:02 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/#ev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x20020045) 14:06:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}}, 0x20}}, 0x0) [ 506.337457][T31069] input: syz0 as /devices/virtual/input/input133 14:06:02 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:02 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x300}, 0x20020045) 14:06:02 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/.vent#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:02 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/%ev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803e0000}, 0x20020045) 14:06:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x20}}, 0x0) 14:06:02 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x3e8}, 0x20020045) [ 506.744039][T31095] input: syz0 as /devices/virtual/input/input136 14:06:02 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input//vent#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x20020045) 14:06:02 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/*ev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0xf}}, 0x0) 14:06:02 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:03 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x3ec}, 0x20020045) [ 507.071695][T31119] input: syz0 as /devices/virtual/input/input138 14:06:03 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/\\vent#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:03 executing program 4: execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=[&(0x7f00000000c0)='/dev/adsp#\x00'], &(0x7f00000001c0)=[&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)='GPL),\x00']) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5fc, 0x200000) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x32fae6e5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r1, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x10}}, 0x0) 14:06:03 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/+ev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:03 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x3f0}, 0x20020045) 14:06:03 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/e\\ent#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0xc0}}, 0x0) [ 507.382683][T31145] input: syz0 as /devices/virtual/input/input140 14:06:03 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:03 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x200, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0) recvfrom$packet(r0, &(0x7f0000000100)=""/52, 0x34, 0x2000, &(0x7f0000000140)={0x11, 0x11b, r7, 0x1, 0x9, 0x6, @remote}, 0x14) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r3}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={r3, 0xd6, 0x3f}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000200)) sendmsg(r8, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:03 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/ev%nt#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0xec0}}, 0x0) 14:06:03 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/-ev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 507.590127][T31160] sctp: [Deprecated]: syz-executor.4 (pid 31160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.590127][T31160] Use struct sctp_sack_info instead 14:06:03 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x3f1}, 0x20020045) 14:06:03 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/ev.nt#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:03 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x33fe0}}, 0x0) [ 507.805946][T31176] input: syz0 as /devices/virtual/input/input144 [ 507.824206][T31178] sctp: [Deprecated]: syz-executor.4 (pid 31178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.824206][T31178] Use struct sctp_sack_info instead 14:06:03 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/.ev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:03 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/ev/nt#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6}, 0x10) 14:06:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20000120}}, 0x0) 14:06:04 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x3f2}, 0x20020045) 14:06:04 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 508.159316][T31202] input: syz0 as /devices/virtual/input/input147 14:06:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x7ffff000}}, 0x0) 14:06:04 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='//ev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:04 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/ev\\nt#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:04 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x3f3}, 0x20020045) 14:06:04 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1c1181) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r1, 0x1000}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r2, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x25c}, 0x20020045) 14:06:04 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 508.542808][T31232] input: syz0 as /devices/virtual/input/input149 14:06:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0xfffffdef}}, 0x0) 14:06:04 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/eve\\t#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:04 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x3f4}, 0x20020045) 14:06:04 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/0ev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x202000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x28) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x2c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x7, @rand_addr="33148f328a8681b44fc37a41c7042282", 0x7}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000200)=0xc) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x18000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000080)={0xfffffffffffffffa, 0x4}) 14:06:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x2}, 0x0) 14:06:04 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:04 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/even\\#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 508.929664][T31265] input: syz0 as /devices/virtual/input/input152 14:06:04 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x3f8}, 0x20020045) 14:06:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r2 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x2, r2}) ptrace$getregset(0x4204, r2, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/159, 0x9f}) 14:06:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x8}, 0x0) 14:06:05 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x02', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:05 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/Xev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:05 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:05 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x3f9}, 0x20020045) [ 509.282006][T31300] input: syz0 as /devices/virtual/input/input155 14:06:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x300}, 0x0) 14:06:05 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x03', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) eventfd2(0x5, 0x912635ef1366f68a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r1, r0) sendmsg(r1, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:05 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/\\ev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:05 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x04', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0xffffff1f}, 0x0) 14:06:05 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:05 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x3fa}, 0x20020045) [ 509.641705][T31327] input: syz0 as /devices/virtual/input/input159 14:06:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) open(&(0x7f0000000000)='./file0\x00', 0x280, 0xc8) 14:06:05 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/cev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:05 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x05', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) 14:06:05 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x27}, 0x20020045) 14:06:05 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x4ff}, 0x20020045) 14:06:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x2}, 0x0) 14:06:06 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:06 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x06', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 510.038685][T31360] input: syz0 as /devices/virtual/input/input162 14:06:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x4000) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b082) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x80c, 0xffffffffffffffff) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000080)=0x9) dup2(r2, r1) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000040)={'bridge_slave_0\x00', 0x8}) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) 14:06:06 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/iev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:06 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x500}, 0x20020045) 14:06:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x3}, 0x0) 14:06:06 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\a', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 510.349920][T31387] input: syz0 as /devices/virtual/input/input165 14:06:06 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:06 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/lev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x4}, 0x0) 14:06:06 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x600}, 0x20020045) 14:06:06 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 510.671837][T31407] input: syz0 as /devices/virtual/input/input167 14:06:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x6}, 0x0) 14:06:06 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/oev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 510.926391][T31431] input: syz0 as /devices/virtual/input/input170 14:06:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r2, r1) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f00000001c0)=0x5) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r5, r3) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000140)) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]) 14:06:07 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:07 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x700}, 0x20020045) 14:06:07 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xa}, 0x0) 14:06:07 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/pev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xc}, 0x0) [ 511.191059][T31448] input: syz0 as /devices/virtual/input/input171 14:06:07 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x801}, 0x20020045) 14:06:07 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:07 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000000)=0x6) 14:06:07 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/sev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xe}, 0x0) 14:06:07 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x900}, 0x20020045) [ 511.638980][T31493] input: syz0 as /devices/virtual/input/input175 14:06:07 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:07 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xf}, 0x0) 14:06:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xb4080, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x0, 0x60, 0x8, 0x9}, &(0x7f0000000080)=0xfee7) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)={r2, 0x101, 0x2, "acac"}, 0xa) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:07 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/uev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:07 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xa00}, 0x20020045) 14:06:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x10}, 0x0) 14:06:07 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:08 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 512.108093][T31531] input: syz0 as /devices/virtual/input/input178 14:06:08 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xc00}, 0x20020045) 14:06:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x394, 0x0, 0xffffffffffffffcd}, 0x20020045) 14:06:08 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/xev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x60}, 0x0) 14:06:08 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffeb, 0x0}, 0x20020044) 14:06:08 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xe00}, 0x20020045) [ 512.467260][T31563] input: syz0 as /devices/virtual/input/input181 14:06:08 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xf0}, 0x0) 14:06:08 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/d%v/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x81) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040)=0x9, 0x4) 14:06:08 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x300}, 0x0) [ 512.777235][T31589] input: syz0 as /devices/virtual/input/input184 14:06:08 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf00}, 0x20020045) 14:06:08 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:08 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/d.v/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x5b2}, 0x0) 14:06:09 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x10ff}, 0x20020045) 14:06:09 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 513.221609][T31621] input: syz0 as /devices/virtual/input/input186 14:06:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x600}, 0x0) 14:06:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400a00, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x400000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2d63707570696473200014000000000000"], 0x11) ioctl$EVIOCGPHYS(r2, 0x80404507, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r5, r4) r6 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r7, r6) fcntl$dupfd(r1, 0x0, r6) fsetxattr$security_evm(r5, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@v1={0x2, "0044b69d1fb07f12efeec8d2c2084232"}, 0x11, 0x1) r8 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r9, r8) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000380)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f00000016c0)=0xe8) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000003f80)={&(0x7f00000013c0), 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x38, r3, 0x0, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8900}, 0x20004000) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2100080d}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x20000000) 14:06:09 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:09 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x14ff}, 0x20020045) 14:06:09 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/d/v/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:09 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 513.568262][T31651] input: syz0 as /devices/virtual/input/input189 14:06:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xa00}, 0x0) 14:06:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r2, r1) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000000)) 14:06:09 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:09 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x1800}, 0x20020045) 14:06:09 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:09 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/d\\v/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x8001, 0x20) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0x80000001}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r3, &(0x7f000001afc8)={0x0, 0xfffffffffffffe31, 0x0, 0xfffffffffffffe6f}, 0x20020045) 14:06:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xc00}, 0x0) [ 513.971766][T31688] input: syz0 as /devices/virtual/input/input192 14:06:09 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x2000}, 0x20020045) 14:06:10 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:10 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/de\\/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xe00}, 0x0) 14:06:10 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:10 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x2401}, 0x20020045) 14:06:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xf00}, 0x0) [ 514.391336][T31723] input: syz0 as /devices/virtual/input/input194 14:06:10 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r2, r1) connect(r2, &(0x7f0000000000)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x80) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000080)={{0x0, 0x0, @identifier="5d394989d65f2b4921a3cc7a0aa73db2"}}) 14:06:10 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev\\input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:10 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:10 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x2801}, 0x20020045) 14:06:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x3f00}, 0x0) [ 514.687502][T31749] input: syz0 as /devices/virtual/input/input197 14:06:10 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:10 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/%nput/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 514.961339][T31769] input: syz0 as /devices/virtual/input/input200 14:06:10 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x100) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x140) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r4, r3) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) sendmsg(r1, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r6, r5) ioctl$SCSI_IOCTL_START_UNIT(r5, 0x5) r7 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r8, r7) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f00000001c0)=""/21) r9 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r10, r9) getpeername(r10, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000000180)=0x80) sendfile64(r2, r7, &(0x7f00000000c0)=0xfec, 0x3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x1, r0}) 14:06:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x4000}, 0x0) 14:06:10 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:11 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x2c01}, 0x20020045) 14:06:11 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/.nput/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x5865}, 0x0) 14:06:11 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) [ 515.343003][T31806] input: syz0 as /devices/virtual/input/input202 14:06:11 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:11 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x3000}, 0x20020045) 14:06:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x6000}, 0x0) 14:06:11 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000000)) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:11 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev//nput/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x6558}, 0x0) 14:06:11 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x3801}, 0x20020045) 14:06:11 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:11 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 515.820468][T31852] input: syz0 as /devices/virtual/input/input205 14:06:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x8100}, 0x0) 14:06:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) clock_gettime(0x0, &(0x7f0000002f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002e40)=[{{&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/149, 0x95}], 0x1}, 0x1}, {{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)=""/179, 0xb3}, {&(0x7f0000000340)=""/86, 0x56}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x3, &(0x7f00000013c0)=""/4096, 0x1000}, 0x7f}, {{&(0x7f00000023c0)=@vsock, 0x80, &(0x7f0000002600)=[{&(0x7f0000002440)=""/199, 0xc7}, {&(0x7f0000002540)}, {&(0x7f0000002580)=""/68, 0x44}], 0x3, &(0x7f0000002640)=""/137, 0x89}, 0x5}, {{&(0x7f0000002700)=@pptp, 0x80, &(0x7f0000002880)=[{&(0x7f0000002780)=""/218, 0xda}], 0x1, &(0x7f00000028c0)=""/40, 0x28}, 0x200}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002900)=""/201, 0xc9}], 0x1}, 0x9}, {{&(0x7f0000002a40)=@can, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002ac0)=""/155, 0x9b}, {&(0x7f0000002b80)=""/26, 0x1a}, {&(0x7f0000002bc0)=""/140, 0x8c}, {&(0x7f0000002c80)=""/175, 0xaf}, {&(0x7f0000002d40)=""/169, 0xa9}], 0x5}, 0x3}], 0x6, 0x42, &(0x7f0000002f40)={r1, r2+30000000}) 14:06:11 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x38ff}, 0x20020045) 14:06:11 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/\\nput/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:12 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\xff', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xb205}, 0x0) 14:06:12 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 516.204241][T31879] input: syz0 as /devices/virtual/input/input208 14:06:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020145) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r4 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000000c0)="4b9327e070f7cc1a1d0c168fd3faed41a5f78eddfac1be04a3f5b44338688e89d58e9a4d3085c374bdb30e2c0469810e552733faf5a4beb960bd") r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200100, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)=@ethtool_cmd={0x766c93ad1a12e847, 0x4, 0xfffffffb, 0x8f3, 0x9, 0x1f, 0x1, 0x3, 0x0, 0x5, 0x8, 0x6, 0x4, 0x20, 0x8, 0x7, [0x3723202, 0x7fad]}}) 14:06:12 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\xf6', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xf000}, 0x0) 14:06:12 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x4000}, 0x20020045) 14:06:12 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/i\\put/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:12 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:12 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x34000}, 0x0) [ 516.619475][T31917] input: syz0 as /devices/virtual/input/input212 14:06:12 executing program 4: socketpair$unix(0x1, 0x612407c01fee82d7, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000)=0x7, 0x4) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:12 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x4400}, 0x20020045) 14:06:12 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/in\\ut/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:12 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x400300}, 0x0) 14:06:12 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:13 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x4700}, 0x20020045) [ 517.019156][T31954] input: syz0 as /devices/virtual/input/input214 14:06:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xf0ffff}, 0x0) 14:06:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) r3 = accept4$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x7fffd8ef}, 0x10, 0x80000) accept4(r3, 0x0, &(0x7f0000000080), 0x0) 14:06:13 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:13 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/inp\\t/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:13 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:13 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xa0fc}, 0x20020045) 14:06:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x1000000}, 0x0) [ 517.400175][T31990] input: syz0 as /devices/virtual/input/input217 14:06:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x10001, 0x88) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r4 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000814}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r3, 0x2, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8a, r4}}]}, 0x64}}, 0x1008) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r5, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:13 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:13 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/inpu\\/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x2000000}, 0x0) 14:06:13 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xccff}, 0x20020045) 14:06:13 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 517.791126][T32024] input: syz0 as /devices/virtual/input/input221 14:06:13 executing program 4: sched_yield() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x3000000}, 0x0) 14:06:13 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input\\event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:13 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:13 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xd8ff}, 0x20020045) 14:06:14 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 518.111212][T32054] input: syz0 as /devices/virtual/input/input223 14:06:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x100400, 0x0) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000280)={0x0, "c91f2e9da6883465b4f825a76f6e62960f9f3868c0416ea9c0b6e5d4a4e9786d", 0x100, 0x7, 0x7ff, 0xbc918cd114758482, 0x3}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) connect$can_j1939(r3, &(0x7f00000001c0)={0x1d, r4, 0x0, {0x1, 0xff, 0x2}, 0x2}, 0x18) dup2(r2, r1) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000000)=""/141) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x4000000}, 0x0) 14:06:14 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:14 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/%vent#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:14 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xdcff}, 0x20020045) 14:06:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x6000000}, 0x0) 14:06:14 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 518.510104][T32089] input: syz0 as /devices/virtual/input/input225 14:06:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)) semctl$GETNCNT(r0, 0x7, 0xe, &(0x7f0000000040)=""/251) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r2, r1) sendmsg(r2, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x4000) 14:06:14 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xe400}, 0x20020045) 14:06:14 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:14 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/.vent#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xa000000}, 0x0) 14:06:14 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x90000, 0x8, 0xe65b, 0x3}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r1, &(0x7f000001afc8)={0x0, 0xffffffffffffff27, 0x0, 0x1b0, 0x0, 0xfffffe32}, 0x20020045) 14:06:14 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xe803}, 0x20020045) 14:06:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xc000000}, 0x0) 14:06:14 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 518.933794][T32126] input: syz0 as /devices/virtual/input/input229 14:06:14 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xe000000}, 0x0) 14:06:15 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input//vent#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:15 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xec03}, 0x20020045) 14:06:15 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 519.351545][T32162] input: syz0 as /devices/virtual/input/input231 14:06:15 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xf000000}, 0x0) 14:06:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x5}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="fe046eebce7fc38bf40fd8d8a527af1487ec991e626f90a6f82c7e695b4e5c875df9d02b51772091593395a95778e1d69f9c5988989a3e6be3828eefa855c545abcf898c15f9beb5541f801b5654", 0x4e}], 0x1}, 0x240080b4) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:15 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf000}, 0x20020045) 14:06:15 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/\\vent#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:15 executing program 4: lsetxattr$trusted_overlay_origin(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='trusted.overlay.origin\x00', &(0x7f0000001580)='y\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$unix(0x1, 0x1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/null\x00', 0x105400, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r1, r0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r3, r2) sendmsg(r3, &(0x7f0000001380)={0x0, 0x1cd, 0x0, 0xfffffffffffffee6}, 0x20020045) syz_open_dev$binderN(&(0x7f00000015c0)='/dev/binder#\x00', 0x0, 0x3) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000001480)={&(0x7f0000000040)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000080)="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", 0xff}, {&(0x7f0000000280)="9e6b5ac015746e83cbaea4fe7e69deb8f2d02073fc31910a28189d0b35c5ae3750abee49f3ee78f75a2525d5e4357962cafa3b3c24fb0c84a3b6faea18309bf2f59983e164c738ed5f8093d9c1ffb827fb2a9a17a8f77800f9fb84d7e24e73722ea317a93058bd78f703e0ed5588c3452334d07039eb8a6f8d6a4b6e81b362e789b9348c35a9e7a7fc73a376430cef623e6c55773a5a8666bbdc059f433316b7d521a76ecddfb986a843e0fb64060ad1fc8b1203a1d5b2f53f00667614cab92aae85ffc828d473ef5d40a16416aff520d951a04531aea28a03bb83da24434940e4643f227c1758373b74d2f12fbed56dd72c3c893be190b3740727d00134ee243c074d8b31a3107c3b25b8f52ff3dc87689829101535f489da20954a070ee6addd07c0469c14ea0da276c1d9d501aef88abf319a7ffc9989af113f6d07aa567b11386120f472bc812049fdacfa69849324f47ab33746bfeaeaf97db5d883033f05fe18009044c3fc2732b2647e62fa22ffe8aec9849d3a3a1db421b7a12b5a918278966e066de510a3d207886e73c90b5228e5376f8ee63bb213452bdc236f536eec3f8ab9bd99f2643078d9c379bdca0de8e528a6cdc794ed0569731ad07fc92ede464b0fc2150eca5c1983b800b30a9de6a8c7895ccbcbf0c79f9b28138c219317357d8f0e57ed9fa69700f5409f8a9d90cb9fd60b4ba0d03e213fa1065431e78f8becf7ed277e6cb9cbfaa81a2109607007bd62d97eb404513d637c64fdad6422d6c8d9c793885da0bdecfa2991db5c588cab206af510830c4887de1788631582a0df96891928cfa974d603a44ec38a328683a381058c75d0cd20fef5bc23fe7eb59027a5ca8a998ef7fc1eb63bf51025711431224feb15c43de8292d9a4bcded31a1b7fd959560438905ed1a8e258bbdb4bb6a12f188c79dbc20b80966bea4d50a49fea87b45bc45ed072b954a6b7d0804e78132bd93ede9075a2736ebeb6d259216806445be98cef2befbde16a2fdfe4f80379932a37916cb9a361be83dc4d273de717003c73f943ee3a71876ca8de98f70d7157513caa546da340bf875ac44ff987f8f92f3e4b0398646acd750bdfa932dc2a9e3667fd330e0c56245d08f60382f91d6c9dbf5a6b653127285d7fe056808767b529643e07ae130436a75409c7b08c279a1318555fd7745b3855f8f510cdbc0263c8e2ff779760af1c98acbd7beb727b3fe41b22dc6fd13da7c25bc288ecbc51b2fa5ab2ed9ff0b056419fcd06c0e291b2ff161d79e13ead725240aff88b19d518644a79fb091b04496a05deddea92d269412d1c449b6893d9c8ab31f884190be93663f3afac58b2ed5506a9608942c442ee4c5a04e86bd2258ead41cee16b3bb9e6372b98693ea566f981a946d55ed1ca9d575819f390e00273a65aa09e36c57acb5db84c01a06176be5b7cc74482d7108d943427e0954f1d6055e916ca66646247ff84d245456c575052f0445a2efd7b8adc39857e9e0796ce3b63827c28b5da1baa39541de679f9319ef3483f716ce69f23ddbe06f22cfce07060b3c51140d1a726fa6959e7d9ae56cef1a3e03c9e8a5a947fbf122912bfb29fbd2942191a6680293f09142611188e14792f0689359a48c45681bd3289ce0c172897b8d781e2cb3fea95e7c2b723a3aa6abde1e3ab77955ed1b75b336fe0820d2e470812a33b309e29fe448ab46609a0968b0afe65a482cf53636197cc724e675dcab3ab77b3043a9038877b3576e26d806bda6144851fea6fcbe74ae787bfa55cf50d767dfa5717331a1574374becc0f70f3088be89d68fbc88cebb05083e8eebbb4f57aea04f5c34b9da6403fdd442af0a7ed0aac04bc4eeb0c20326c6873047e857d3c227b31c48e338d04c8b631b52a1698338f24e04fe178e9f6de6920027ea45b0d8ce2339783b6157b1b447a4b06a4bbe1a601ff23a92cdb4b55eba267824700acac4e247d77dbb784d6fb8a89340226f75b815da94944a4b4e7e986e7af9a67e4e5efe76cbf4a4b169312215ded913e061a4fb109fb21a330b1d2ca8cb2869f457746a94d679180a5ff89d3f8909c983429756537a99cf823286b1dc3973376cb1600f35bce35421ee0e021b6e2ead456e76d911a4817724fd97b792560b75bf79a8df89d578e6eb84518d9e733787efefcf17735bce82a95dfff71eb98b184c61f4edca2f68d181a86a0ed7ef750e03aa9cfca9511d15ac8992ab16019065aa8a8107675d57ff777a205830871d47299e5f7f0b264c8418d2c031cdbbe0d82f0df4400650ffc7e0061c420ed76c7d2cd15662675168d0a075120a20cb8ac0a010626f94c47fe83a1c05a1ba7ac2537d8655a11bcd460bc30f1b9b2c2b1f68d83991625f3eb28ab434800d9bb6aa7b1364dd72cc24d2f6c1ae49a192d9a3fa64c218cbf589f9a9e3e151ec2e5cbb55087ea218da43f8922aca02984a68cb22e3e9d2c0855c8ecfe09ab0ab2b0b400c6cf6fa2455c76a15edeffa152aa326f63f3829a6b3b78c442e58a142124047ff21271f07b14130bc46dc065ebbd58b4a3b1b105d3161a059471f67a08da9b4898df0f4b4313d90f0ae03e6c16c92931075c6aed79cd1e8984b236bf02b81ebf1aa3faa7b67234492d6ff39d5b5258483c523f576a2253bc0bb64cf8128ccfc7996a8d4840c8f2fbadcf844ab2dca26c42bdd20b297113bccd49e4964b92b3a5b6b606c275e4596831f00a345f992c29615953961f9fef626585e6226fddd84a291da87a65066bd41e8aac6903585fc6b43d18816fb07962aa875f5fe51fd156214c4d20af69857ae5f329b885442ccc62fdd60f9e0580f60df9a82bb3b8a8b3aa89c0fbd5529a6ca0e5f331f1624a1ce4acbe570e05a6c1b8f1f121ff403c70767d4333a3665d1cf4f4b754a1d4aba4c469581a3de2a694b0c4f7945d7c5af0e9cc27173d7db31228bddc133ea00d1113aedf03a611491b2eeac16023f9b4fe87eec9fc08c1e490d85e2dafe4637079b7b530f2450e00a3017288cc858ecbd6473843b68c270b7e51eab6bde4ab3e538db8b86aea36560b15347072c8aa2d83a7ec8d9ca13b426d84667496f664990e4e5fc67c384a6350dfd3f58d3cd06e9fc347514449836731ef928803fe2eea5b3a0962a8e07403ead5804ecd567a1f3193c9a33ef7853e8369fca8026b9eccdc582773476df767081ca64e445f316a64a5c757e7cc72663c26feb35bee65af3636439fe5eec07a46b0e9e6ccec5c09fc523284eb1a5b3513dc9c8c0a4e9980e2bd9709028b4201fb5b0a1279396c89fb2cae8be6bf7c6cc94151ed7b3bea2e882f87f82f6d0669b11cd3c78fc4f2a0d4e18351245f1db3a7f92d8c140a556817f2098934388186277663724fd3e9e2628c28a5ab065919c410c2d8738add436e88f83e17cda62c9ff04765be9780f3d6329d04fc7dc34561eb54a1873bf2db34df11d9066abfc4c71fbb26764e1424b4b148077def6c9391bfd27151e09519aaf1039ebb669c3f73e83c8a9b8fcdf584c5c851a271d36fb0ba59ca01a9f9e662ef66d5cdb00a420ccd4d92f4951e4383935eeae82cc65f98f926daadde8c5bcbbdf85e7687bbd4cbc10d212238c7afd953debe04ec5a9598d05c52e9244c23be3a6bb4f39c93bedf9b3bfb722920f0a12f0bb7b96c10bde6ee85c297be6639ecf802bd29eb3f737ac2e97da034e39dd811ef82cd8107730a970f05b9f20f0e85809fdb5f2a05de6b99ea4e8b5447c6df94353d2c9b959d7b1b2db813247f8da6cce543e38eadedca89075736f0e4ce2d3aaf107b9481b9555ccc5ba35ea592078511a0ab0dc6df744bacb4c480f0f16323a80ee1c84f509d254d6a0ad9be8edb69e23a4c8cef0f9504489ef6dfab6c60e234b92ae3711b905e9efa6f46cd21833d7e323bd8c8de85e52acc92abd67c8e4e7c037609f278c67241e489582e2d91e259db223290163e6cefb4177d4c2b1f130e3da7faefedc45d49101f502322eae2b6879e79ef446a181f2aa963447eb688dea9ab79da1627dc433e6610f5fd48c9a35224b1d419da8d3dc922c928cadeb450e98a9b517b9a7976446b06e41ad41cb1d4708efc4d23f37edcf216fb0b60b7058bf6bb5f18ba0726f59d25d42983769e38c96f9c90f9852da6f180ae7ab95557cb0260fa762e1b768392211e6dfdb432df7d81fd33d529245c1f95fe7a738ad636ffc8c06ed8a1d8c0bf1ae907e36daddc46624f77c601989d3ef4bb211a030f8d41a5a5b42057ddbc29d32319f459204b87d110110bd8c35c92ef39a45420427ab0ff1e29cad986b20885870b5b9f27826d35cdba988299b7329e7de3dfd9ead7ca8fc621d611dd4094ad97f71d22b1caa4433962d600e8e4a0ed46a7e8b33458f971e9a0fec4e221d3a24aa66d1d5dab59b6bbe6e4756f38d385537890a7b38b7eeb116d120168eaa8ae25f488d712c671456f1d3da79a997d33b5bd6eb3dab5c0ca23941d7f4567013e39ba45cc6bf828897a3fb4f603981ebd1576598f2e58a4d92d827f7e48c56558b99a73bb1280b741d37439189917b876bff77eed36006084f407cae52ede4e2ea484fb1366366005a72b08c3f0631506e0c99b18aad977dc00ca93f3b9abc2bd8161edff46f21bee936f3d28af13ac0ea25153a4699ce0088a656ed83467bb3782412966c1ed8876de9275778e4a33f877eb2f03ae094bbd866be0e6eca391f12c584dc2143663ba9f5b261eafd4203f1af8d952dcdcad155fcac074fa572b6e0fc9e567e66f31c1506e85299075ccaa1ed8f5e920d3b44c2e82592559f99102b3e45be982d6be0e0150d901b58068f5da45079614b9c16033347b86b8bae9a056a09f243b782faf0f8ead3da9eecb45bdf0422476177203a0a11bf8356aa814bb5e3ffce1530978f30710bc486a8f8d22984ec3a59c1c09bd6deeaf5c041d9c9193132fc1a78f5cd217fa48c120f44a3a053b009f5cf2bf1e62332eb98d89ea30643f3a517349146cf950c19aaa2c70383bb745cb49521665c18bb4ac4134ca7ba0058683e71edd3b608e923454fdbab2f5cb009cc0b648e4b7344d384e651dff5a58dce0f56b9a354c6c78832a984c12465c5c4f55dc096fc0b203dad9a743590e51fa9e63aebe276aa384d18c47651263ea27e2966f4fea1a480bdb98fb54b679781d6c8d098207c604f2dc8c970ee593be45c14c668430d761b742492dffecf867b861b8fdfac30934636b59a830483e53d37c34ea184f0e52905e7d9116ec2a0d9fcfcfcd2de984178b3008f0fb8d4b05f288603e1be5060878a7f019b481aa6f608a16e28c27fa158948da38d359ff46ede58272b3f1ef9740b0c25f2d0480d1a7f9c7e56cfed25936c6d74b9f608af36e92f54d7697ec7898860003e60aabf7c9c6828a268b9ed925cb64b8f4c1fa8d3c87e46c13e40645bd708382a13ead093237fdc65d74ed7b24b14d5445e69b7303b658d16c65c840262445e81aae0046a34f6b446f79ade9621786e74a94adb3bb977e6c38249542d7eb8cc4c9a63ccaab146a0c4de25f91d7560f907240e57d2726b84b8feee8acf1966e7ec4663255d27c240706df56f6118b628947f7c64a44950fce5cc5847e2fbb97c7b8f92da63943aef53a87d537e3062b28afefe1142d73841cfbb043a97084c10ba3e0e93487c9466f406bbf08bdf80fe6f4f9884184194b7716c0a281cd44327a8e73f9238266153281419f2d412f7c081c1d47a447bf6bca860e1aca8ea06fec06fda087d5c29c6e417da7a9c003168d25", 0x1000}, {&(0x7f0000000180)="9c66e28c4893794e3629e9014987d52a4fe416413e2bdf4f07dd64cebda77aaea88e29bce4c0a71b34b23a3885aa26d5c477ff6c3e66b589dbd051b62055654511eca282aa31046196a34c5163ea9a3436a2b55ba899b328772be84776bf723c676ccbb3f10517adc925bb2c90cc98", 0x6f}, {&(0x7f0000000200)="925280dc5b61301c2ebb900bc28fa528592d76c6925ad0eb33a6e256", 0x1c}, {&(0x7f0000001280)="a843cdf5c7680850bc03fcd91be35488d0b3fde054cfe0137c0180de2967fe81bb7d0724c2b43686fd1ccff0369f2ff6d42fcba017cd774a07260fd3ec6141a23c17463b20f506ed26ec62c2ccc7cda0b6502d829094308bbec192f4472ae773178c98b40b25a5fa96906b7a5203930f3600b75447861f50b11dca0fd0edbafab3496fb342a802971062bc5a48cec310d256c9332dc22000ca3d92d33d7821a76f7496bbb719dee20cfed999109d9468b9c576032ade4e0fdbd437c0cc4c2f0c9377c80d490a292dfa5c40135d78d7bb1a0ec940afdf7099fbae8a8524c8a47464322927de803b5e", 0xe8}, {&(0x7f0000001380)}, {&(0x7f00000013c0)="9c78b7edffb7481d81867604486a915166de106dc9a623b0f47157d27e3b900a055866147cf18b0940f4dd80cca316e68f69f3dc01e040e5a636220d73c0c4a7", 0x40}, {&(0x7f0000001400)="060cf50c6ea5ccf57be035238c71ab1adb35abf70ede02ac916e069937a6d6b20b730bbf9f24c284eea45cf07301114eac8ab457c77736b7e6", 0x39}], 0x8, 0x0, 0x0, 0x4044091}, 0x8008) 14:06:15 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x10000000}, 0x0) 14:06:15 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 519.795171][T32198] input: syz0 as /devices/virtual/input/input234 14:06:15 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf003}, 0x20020045) 14:06:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10b, 0x40, 0xa4, 0x5, 0x273, 0x8, 0x315, 0xfff}, "27cb33172196226fa5974ebc3070688c6cb51561bdfae4578a840513d94003f5f23d7ba2ef4db9c8eb20e9f79f50e62b877f5623062a713739dfd2f1d63d7ce9072d18d96598b7b3fddaf3aaf223599a2b185769a181e8a3d824c9413a90895d33bb1e1027b96757f5fd11c040ef271b1c873e78237462d467cb6469a79e5020adf87f2b02b78279ecafd2c2ddb92dac226afb0025f114e6a60fa77b839663", [[], [], [], [], []]}, 0x5bf) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x8040000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 14:06:15 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/e\\ent#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x3f000000}, 0x0) 14:06:15 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(0x0) dup2(0xffffffffffffffff, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:16 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x19ec0bc37a0148a5, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x5) lookup_dcookie(0x3f, &(0x7f0000000100)=""/184, 0xb8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) write$cgroup_pid(r2, &(0x7f0000000080)=r3, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r4, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) write$evdev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) [ 520.145125][T32225] input: syz0 as /devices/virtual/input/input236 14:06:16 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf103}, 0x20020045) 14:06:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x40000000}, 0x0) 14:06:16 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/ev%nt#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:16 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:16 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(0x0) dup2(0xffffffffffffffff, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:16 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf203}, 0x20020045) 14:06:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x60000000}, 0x0) 14:06:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x40400) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}, @in6={0xa, 0x4e23, 0x42, @mcast2, 0xfffff000}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0x80000001, @empty, 0x4}], 0x84) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x1) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd91}, 0x1) [ 520.622046][T32265] input: syz0 as /devices/virtual/input/input238 14:06:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x65580000}, 0x0) 14:06:16 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:16 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf303}, 0x20020045) 14:06:16 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/ev.nt#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x81000000}, 0x0) 14:06:16 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(0x0) dup2(0xffffffffffffffff, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r5}, 0x8) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000000)={r5, 0xe7, 0xa1, "ff3ec46558de45777e75e97c5b26a52e5f176182099a5a64d443743677a66798bc77ec72ba4bf0105bb647feb36054f781d1138605a9b4b22164b59f96cc940c1734bcf0c14d37c6e2f134edadbf990e85311f582cc78f43403e335a875d9125e592912e7dffed6257a585bd0d54d5e8f412aaca4fb18f6f324f5623231876bea1e9a91cbcb097275fe55deaa7f11544bf3a77fa05bb30a1a71d736849ccbd11a6"}, 0xa9) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:17 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\xff', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:17 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf401}, 0x20020045) [ 521.088131][T32305] input: syz0 as /devices/virtual/input/input242 14:06:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x88a8ffff}, 0x0) [ 521.224684][T32324] sctp: [Deprecated]: syz-executor.4 (pid 32324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 521.224684][T32324] Use struct sctp_sack_info instead 14:06:17 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/ev/nt#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:17 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 521.325693][T32324] sctp: [Deprecated]: syz-executor.4 (pid 32324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 521.325693][T32324] Use struct sctp_sack_info instead 14:06:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x9effffff}, 0x0) 14:06:17 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) dup2(0xffffffffffffffff, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:17 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf403}, 0x20020045) [ 521.520711][T32341] input: syz0 as /devices/virtual/input/input244 14:06:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0) sendto$packet(r2, &(0x7f0000000000)="3cac6536689f130dd7fb9ba4bfb64b122043ad599940f8850a564998fc9212b5da5cecaed4961444c998628f3bcdbe96a72e09c97c02bc42c32a4bba9f02bb60fc2ef3d5300d4e1cf15e26c3f920c9ce278464190ce8248b705287006f6f3e35db7cbcfd347f587537ab165f3f8b993f84b1f74f463670d89afb3adfe2588a39716b264ff98ca828030b55d9d003f7a080b7cd9c0341699734b6dbe11bdfaac3b707c9a68ab997b3a55045c8de68a7d4a4735aed689dbd2b7ecffb4515430bfbedc8", 0xc2, 0x4000004, &(0x7f0000000100)={0x11, 0x11, r6, 0x1, 0x4, 0x6, @link_local}, 0x14) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xb2050000}, 0x0) 14:06:17 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf803}, 0x20020045) 14:06:17 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/ev\\nt#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:17 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) write$P9_RMKDIR(r3, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x80, 0x0, 0x8}}, 0x14) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0xf7, 0x0, 0x387}, 0x20020045) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r5, r4) sendfile64(r1, r4, &(0x7f0000000140)=0xfffffffffffffeff, 0x101) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, r6) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="0559c6685d8f76406b98fba6ed1e2145ac934fe9895241a3410b64cc0d8a3093b9645068efe912cba31ebdf1e770378651850b7f926eb0362c435848e223ea57c733709050ee4107a24003fe4ddc567c15dd726e41ee96fca8db3fde6058701e95551f14f9e5f2baaf0ff7c52d0a0e9ee6e361075263bdb4cea0bc979664ff", 0x7f, 0x40, &(0x7f0000000200)={0x2, 0x4e22, @rand_addr=0x80000001}, 0x10) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0185647, &(0x7f0000000100)={0x9d0000, 0x40, 0x9, [], &(0x7f0000000080)={0x9d0904, 0x57, [], @value64=0x8000}}) 14:06:17 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) dup2(0xffffffffffffffff, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xf0ffffff}, 0x0) [ 521.901228][T32374] input: syz0 as /devices/virtual/input/input248 14:06:17 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf903}, 0x20020045) 14:06:18 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/eve\\t#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xffffa888}, 0x0) 14:06:18 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x5, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0x9bb3, 0x2, 0x81, 0x7ff, 0x14, 0xe, 0x60, 0x1, 0x35, 0xea}) getpeername(r1, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x80) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@broadcast, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@empty, @in=@multicast1, 0x4e23, 0x1, 0x4e22, 0x40, 0x1b, 0x80, 0x80, 0x62, r3, r4}, {0xd8, 0x8, 0xf118, 0x1, 0x7, 0x1, 0x9, 0x9}, {0x7, 0x8, 0x2, 0x3f}, 0x7, 0x6e6bbe, 0x102b1f2dab8de432, 0x0, 0x8e4a4eac46d83fa3}, {{@in6=@mcast2, 0x4d6, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, [], 0xc}, 0x0, 0x2, 0x2, 0x32, 0x7bb, 0x6, 0x6}}, 0xe8) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xda5cc8fb0dd94d74, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:06:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xfffff000}, 0x0) [ 522.290163][T32412] input: syz0 as /devices/virtual/input/input252 14:06:18 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) dup2(0xffffffffffffffff, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:18 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xfa03}, 0x20020045) 14:06:18 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/even\\#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair(0xa, 0x4, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000080)=0xff, &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r3, r1) dup(r1) 14:06:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xffffff7f}, 0x0) 14:06:18 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x6, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 522.693579][T32445] input: syz0 as /devices/virtual/input/input254 14:06:18 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xfca0}, 0x20020045) 14:06:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xffffff9e}, 0x0) 14:06:18 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2d0441, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x29f, 0x0, 0x2fe0b6e2a24fc436, 0x0, 0xffffffffffffffd8}, 0x4000) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r5, r4) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, &(0x7f0000000080)="498817a7d5fb47e95a8380c1ee4cd748d517b5b32347cc16aba10acbe621c4ae0c", 0x21) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000100)=0x3) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vcs\x00', 0x400000, 0x0) getsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f00000008c0)=""/68, &(0x7f0000000940)=0x44) dup2(r3, r2) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x5, 0x3, 0x2, "e469cb7cfe98ac374fe5bd1ed2b87c3d61a44979bb76be43f3308c0fffad1988", 0xa0363159}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)="a3f8e2df16b45764cc5b7d89ca13a5fdb4f24097563699553f9dc810fba9aca981f489cc8a25b3317a0a2a8dccd078b027aa38ac4fa5905ba48bb0d3d6291661d9f0f99a0c2b7f3e108316d024eb2e3ae974550c01d325febc6fc8c0ad6731206eed331d4636d8298b9917506ff92672e19a367dd5926a92278463aafb9d6c7e518c58021b1767c6d346d329257fee9f1f78fd3da3c6e940bf514e34048697d4eb5e9e91c808a0acc8dbfbe4079ba66455b59e41c8304c3819d14b8c64dfe73dc1f9adea2233cce4c14ef8b8bb4b53808191dafad098cc69b427d714acdb01e6600fb0bf5eac113aa2fd122adca30808b8a1a9ec81ce8e", 0xf7, r4}, 0x68) 14:06:18 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x7, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:18 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x02', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xfffffff0}, 0x0) [ 523.037017][T32472] input: syz0 as /devices/virtual/input/input257 14:06:19 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x19, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:19 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xfcff}, 0x20020045) 14:06:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0xffffffff}, 0x0) 14:06:19 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x03', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:19 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x80', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r4, r3) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000000)) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:19 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 523.411104][T32504] input: syz0 as /devices/virtual/input/input260 14:06:19 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xff04}, 0x20020045) 14:06:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) 14:06:19 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x04', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:19 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe59, 0x0, 0xfffffffffffffcb1, 0x0, 0xfffffffffffffe7e}, 0x40001) r0 = syz_open_dev$mice(&(0x7f0000000580)='/dev/input/mice\x00', 0x0, 0x7f1afe16035ffe5a) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000040)={0x8, 0x5, 0x500, 0x80, 0x0, 0xfffffefc, 0x6}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000100)) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f00000000c0)) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) syz_open_dev$radio(&(0x7f00000005c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000540)={r1}) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000140)={"2831452ed2f9e472051a9d2b279b107f7ed98977bc7ba5d1a102892c371e2836414d0b5e4ffd23f2eef2bc4bcc754674f5a2e4aca9f71076e13ce1b46317d553d1d6dbd720e1e5d4f19162e52dea4e6e9b18b2cefc34a9049daeb7c9a7731d38ee4bd6d6d9999d70cb69bf3e122e3bc12c3973365f1e50c1bfdc323e0acacfd4e8f179c21accfa747e3f19de787b272369148db86d00e887719b9cb9e9281ee7fe2c863dba0d0b2024eb16d4f29ba497f22cd792e357f2341727dda1b7be881218bd7c05371b6e49dc6c1d078af9ea2a855ba1d75f63370ccbebc1fd6aca7354efbfa7a489f214cb0355d0f75dad5993a64d0aefb2bb36f9f190ed213d4540539028fcb85386e6032b0eb2b759c2209c5d342b9e98d9dd1b65a83d269fa314712340ce802629455b8f743b7ed053ed8810ec1008b4d857ee7a2455ed736f94e41b53a4986975d25e149bd243b623d10be3a3c0a4f24d2c501b20fcb4916ad16478252d45985eeca63cccf583ed2112663bff6bb06f082ce613f3c9f44991b7450b0f713c757c7898b23349d72866e9db02a033e6dcdcffc3e409df1f933de39a5bf70efdada07c5c254b474c1c6745488baf7c7ea05b7af22052303f39e61b1980e75a60c823dbc9538bae9742401228dda08f2f2c47316a70acbe46d8312c7972d2b5476dcb0aab1f2f888d831a3c23a953f7d98ac0566d1e596accc87f7a4ca40430943aeb632ea12bd99cab69df96ebe7c4424b5c91e5fe88c8392b78ef80e236f2a9c738dff45c14c676ed24c781dfc4b0833fb4c3d892f3667c5e3ba07180ff9677d4bc83c654e5d767d6158fdad95e9c3bb1f0b6454c71c138312c38f93c28d2939dd6c0326bb84b2350a2e9503e019ce9c13d308da9c5f82ca2165853b3465dbbad93fb1ad8d03f956a9005ace8f0bc1a3386f25ad494e7adeefdb9bbb2dd7754c7c1b1f15547ef0c0ae2ab7fb30ec60a3256a5190add14eec03a9f3394618555173dcb455be090426e74a84753f31dba7e18e59ba686c9b8621114fa195763aafb27bbafa9898a36c10054958dff8a224755537c46bce972b5a1013a503090b2e796e17a59342e5d686d176d787b9714ec2c207b567ecc915a337cf85367edfc5eb9a66e521b90523216a374dc840d520dff45abdf1e1131406078b74186683a75537fc72e63ebc429b7ce47bf8aee49320bb67456420715ad17682003d516f0c197f3e254fe291afa51c9962e68c76b6d7bf225daa9dfebc764130d900c81c2130699bf02e444c97f8f9f6840c44f12930581753f2dbdb205fe7421008c88258f06e506f6a6d79ed0bf099d5f738269a1f412cc1152fb8076dc4724a5e0535f691efce1e6ff610210d3a0db330012f55d4423de3825d4dad325bab357c4309336f7b098cef05df11f4bed179a4d3d3f86fbeba0b989a81e73a59ab0"}) 14:06:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x2}, 0x0) 14:06:19 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xff10}, 0x20020045) 14:06:19 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:19 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 523.811471][T32535] input: syz0 as /devices/virtual/input/input263 14:06:19 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x05', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x3}, 0x0) 14:06:20 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xff14}, 0x20020045) 14:06:20 executing program 4: ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000180)={0x81, 0x0, [], {0x0, @bt={0x3, 0x10001, 0x1, 0x1, 0x4, 0x7, 0x6, 0x8, 0x1f, 0x11800, 0x1000, 0x7fffffff, 0x401, 0x7, 0x0, 0x18}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) uname(&(0x7f0000000080)=""/221) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x240002, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) 14:06:20 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:20 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x3) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x4}, 0x0) [ 524.225614][T32570] input: syz0 as /devices/virtual/input/input265 14:06:20 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xff38}, 0x20020045) 14:06:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x668, 0x0, 0x157}, 0x1) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x30600, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080), 0x4) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x400200) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r4, r3) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000000c0)) ioctl$PPPIOCDISCONN(r2, 0x7439) 14:06:20 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x06', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x6}, 0x0) 14:06:20 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:20 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xffcc}, 0x20020045) 14:06:20 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x4) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:20 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000fec000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)="7069b23f2fe4892e8269fe5033", 0xd}, 0x68) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$EVIOCSFF(r1, 0x402c4580, &(0x7f00000001c0)={0x54, 0x7, 0x3f, {0x400, 0x7}, {0x8, 0x3}, @const={0xc7a, {0x2, 0x2, 0x1, 0xff47}}}) dup2(r2, r1) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000180)={0x0, r4}) fanotify_init(0x12, 0x1000) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xa}, 0x0) [ 524.686188][T32611] input: syz0 as /devices/virtual/input/input267 14:06:20 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\a', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:20 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:20 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xffd8}, 0x20020045) 14:06:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xc}, 0x0) [ 525.003079][T32640] input: syz0 as /devices/virtual/input/input270 14:06:21 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x5) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r2 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x2, r2}) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/cgroup\x00') r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x109800, 0x0) flock(r3, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x400004, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r5, r4) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r5, 0x110, 0x3) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:21 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\b', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:21 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xffdc}, 0x20020045) 14:06:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xe}, 0x0) 14:06:21 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x3742) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x2030805) 14:06:21 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x6) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 525.421125][T32675] input: syz0 as /devices/virtual/input/input273 14:06:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xf}, 0x0) 14:06:21 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xfffc}, 0x20020045) 14:06:21 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#H', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r1 = semget(0x3, 0x0, 0x2cca0496017170d5) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r3, r2) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setfsgid(r4) semctl$GETZCNT(r1, 0x2, 0xf, &(0x7f0000000000)=""/232) 14:06:21 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x10}, 0x0) 14:06:21 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x7) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:21 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x1fff8}, 0x20020045) [ 525.812755][T32709] input: syz0 as /devices/virtual/input/input275 14:06:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, &(0x7f0000000480)=0x333) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4802, 0x0) lstat(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000002f80)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc, &(0x7f0000002f40)=[{&(0x7f0000000140)={0x164, 0x18, 0x4, 0x70bd28, 0x25dfdbfe, "", [@typed={0x4, 0x0, @binary}, @nested={0x1c, 0x70, [@typed={0x8, 0x0, @uid=r4}, @generic, @typed={0x8, 0x72, @ipv4=@remote}, @generic="9b1c571165599c80"]}, @generic="94a80989674b34d43aeda7a7", @nested={0x118, 0x0, [@generic="1d621f2491795a5ca98749d4af7348a19420a41510ef09e812182980105682cf3a3435a0ce26fe9cc244f768a536853b1ceb2c6af8422b5ad42a02a79e66afba79605be5ddd2c0ac16c07ab922044b27cb9440a660ed0839507a1adea1d98e29c948f6b144afa0871b8904b084cbddc2b6ab8ba342516f42397dbeda17", @typed={0xc, 0x28, @u64}, @generic="14ea1dac61c4af1aa6170780969d7fe7a29a89b956fc9bbbb0764d12cd9890b01099a984a76a73456b18acb5839d27b7b908f870cc267e8ab035689d281e47aa8b2a95e6ca9dfa35b3f74dd84fe1e92816074945bb24ffee6dbe67a8a0d6bbe14ba2fddc164b6512bd1b75fbc031d642ec8008d221b9ef04", @typed={0xc, 0x85, @str='\xe0&em1&\x00'}, @typed={0x4, 0x42}]}, @typed={0x8, 0x39, @fd=r2}, @nested={0x8, 0x2d, [@typed={0x4}]}]}, 0x164}, {0x0}], 0x2}, 0x4000080) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000380)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f74d8e5b2806abc8819d3f34b8592d86d6f64653d303030303030303030303030303030303031536266087efefcbee959963d87d930d5647b7b50", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',allow_other,allow_other,default_permissions,default_permissions,max_read=0x00000000000096a3,allow_other,blksize=0x0000000000000400,max_read=0x0000000000000003,blksize=0x0000000000000400,blksize=0x0000000000001000,fscontext=user_u,appraise_type=imasig,defcontext=sysadm_u,euid<', @ANYRESDEC=r6, @ANYBLOB=',appraise,smackfstransmute=,seclabel,dont_measure,obj_role=@,fowner>', @ANYRESDEC=r9, @ANYBLOB=',\x00']) 14:06:21 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#L', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x60}, 0x0) 14:06:22 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x34000}, 0x20020045) 14:06:22 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x300) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:22 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 526.241358][T32743] input: syz0 as /devices/virtual/input/input277 14:06:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) socket$inet_smc(0x2b, 0x1, 0x0) 14:06:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xf0}, 0x0) 14:06:22 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#h', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:22 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x400300}, 0x20020045) 14:06:22 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x500) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x60) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x82000, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000280)={0x5, 0x81, 0x8}) accept4$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000300)=0x6e, 0x800) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x0, 0x0) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r3 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x2, 0x40) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f00000001c0)=[0x2, 0x3], 0x2) r4 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r5, r4) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r5, 0x80045700, &(0x7f00000002c0)) [ 526.601106][ T313] input: syz0 as /devices/virtual/input/input279 14:06:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x300}, 0x0) 14:06:22 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x0, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:22 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x1000000}, 0x20020045) 14:06:22 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#l', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:22 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x600) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x5b2}, 0x0) [ 526.993968][ T346] input: syz0 as /devices/virtual/input/input282 14:06:22 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x0, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:23 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x2000000}, 0x20020045) 14:06:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x600}, 0x0) 14:06:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x3, 0xa2080) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000140)={0x1, 0x0, 0x8, 0x0, 0x1}) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x6000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000040)={0x1f, 0x1000}) syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x58e9, 0x40000) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r6, r5) sendfile(0xffffffffffffffff, r5, &(0x7f0000000100)=0x7, 0xfffffffe) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, r7) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r8, &(0x7f0000000200)='./file0\x00', 0x4) sendmsg(r3, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x1b7}, 0x20020045) 14:06:23 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x700) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:23 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#t', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xa00}, 0x0) [ 527.358420][ T381] input: syz0 as /devices/virtual/input/input285 14:06:23 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x3000000}, 0x20020045) 14:06:23 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x0, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:23 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x2000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:23 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#z', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xc00}, 0x0) 14:06:23 executing program 4: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000400)='/dev/udmabuf\x00', 0x2) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r4, r3) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x4}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r5, 0x4}, 0xfffffffffffffc8a) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000080)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x400000, 0x0) getsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) sendmsg(r6, &(0x7f000001afc8)={0x0, 0x2b6, 0x0, 0xfdcc}, 0x20030045) r8 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r9, r8) ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, &(0x7f00000000c0)={0xb0}) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) recvfrom$rxrpc(r0, &(0x7f0000000100)=""/148, 0x94, 0x40010060, &(0x7f00000001c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r11, r10) ioctl$TIOCGPKT(r11, 0x80045438, &(0x7f00000003c0)) 14:06:23 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x4000000}, 0x20020045) [ 527.742244][ T411] input: syz0 as /devices/virtual/input/input287 14:06:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xe00}, 0x0) 14:06:23 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x4000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:23 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:23 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:23 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x4ff0000}, 0x20020045) 14:06:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xf00}, 0x0) 14:06:24 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x200000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:24 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x5000000}, 0x20020045) 14:06:24 executing program 4: unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x3f, @mcast1, 0x5}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000240)={'team0\x00\x030\xff\xfd\x00%`\xc3\xff\xff', 0xb5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r1, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) r4 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r5, r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, r7) ioctl$sock_bt_cmtp_CMTPCONNDEL(r8, 0x400443c9, &(0x7f0000000180)={{0xe9, 0x1f, 0xb5, 0x7, 0x1, 0xff}, 0x2}) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r10}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000000)={r10, 0x9, 0x1ff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000080)={r11, 0x6}, &(0x7f0000000140)=0x8) [ 528.301327][ T463] input: syz0 as /devices/virtual/input/input290 [ 528.405583][ T476] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) 14:06:24 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:24 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x1000000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:24 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x3f00}, 0x0) 14:06:24 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x6000000}, 0x20020045) 14:06:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x4000}, 0x0) [ 528.771980][ T508] input: syz0 as /devices/virtual/input/input293 [ 528.816534][ T499] sctp: [Deprecated]: syz-executor.4 (pid 499) Use of struct sctp_assoc_value in delayed_ack socket option. [ 528.816534][ T499] Use struct sctp_sack_info instead 14:06:24 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x7000000}, 0x20020045) 14:06:24 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:24 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:24 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x2000000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x5865}, 0x0) 14:06:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000000)="adfd4fe82584bd703093b6ef40df7c1be5f066592a9d2d58d3f29443490f2b4c3857ccec8e02623ef9a8549b8ae2e712563d94131e1b1d50e431a4bcc661e5645ec0d54f6a69bdd869e51aaa38c4e8e13a7717140180349adf0f7dbe89365fa8fba2976d32c8f04671df18947f8a06d780a62073d3d5061aa9b091a47fa587372bd0d400e14dc39a5ede52a93c352e929afa2ce9ec456d40a9680fc2675bea48bcb860fda8de5886f1b24dc687c04d44426b3e24fde8", 0xb6, 0x20008001, 0x0, 0x0) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) [ 529.157337][ T547] input: syz0 as /devices/virtual/input/input295 14:06:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x6000}, 0x0) 14:06:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = socket$pppoe(0x18, 0x1, 0x0) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:25 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:25 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x8000000}, 0x20020045) 14:06:25 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x3000000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:25 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x6558}, 0x0) 14:06:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) getsockname(r0, &(0x7f00000026c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000002740)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002780)={'vxcan0\x00', r2}) 14:06:25 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x8010000}, 0x20020045) 14:06:25 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) [ 529.679372][ T586] input: syz0 as /devices/virtual/input/input299 14:06:25 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x4000000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x8100}, 0x0) 14:06:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000100)={0x5a3e12caf903377d, 0x0, 0x4, 0x0, 0xc1316b88c6fe9b4e}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000040)={0x6, 0x0, [], {0x0, @reserved}}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:25 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x9000000}, 0x20020045) 14:06:25 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x5000000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xb205}, 0x0) 14:06:25 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:26 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xf000}, 0x0) 14:06:26 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x6000000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:26 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xa000000}, 0x20020045) 14:06:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xd00, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r4, 0x80000001, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e20, 0x7ff, @rand_addr="201c5dd16bef4543cd3d3fd118aacca5", 0x8f}}}, 0x118) [ 530.251997][ T639] input: syz0 as /devices/virtual/input/input302 14:06:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x34000}, 0x0) 14:06:26 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:26 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xc000000}, 0x20020045) 14:06:26 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x7000000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:26 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x400300}, 0x0) 14:06:26 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() write$P9_RGETATTR(r2, &(0x7f00000000c0)={0xa0, 0x19, 0x2, {0x454, {0x20, 0x1}, 0x80, r3, r4, 0xaa, 0xfffffffffffffffc, 0x8001, 0x7fff, 0x1, 0xfeb5, 0x44e0, 0x7, 0x6, 0x1000, 0x8, 0x8, 0xbc1, 0x54de, 0x7}}, 0xa0) [ 530.768872][ T686] input: syz0 as /devices/virtual/input/input304 14:06:26 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xe000000}, 0x20020045) 14:06:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xf0ffff}, 0x0) 14:06:26 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x40000000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 530.990800][ T686] input: syz0 as /devices/virtual/input/input306 14:06:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x1000000}, 0x0) 14:06:27 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:27 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf000000}, 0x20020045) 14:06:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) sendmsg$sock(r2, &(0x7f0000000940)={&(0x7f0000000380)=@ll={0x11, 0x8, r3, 0x1, 0x80, 0x6, @random="aeb206bbc381"}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000400)="bd9386f66b59880c6ab43276ea41adda84faa371b4a1b8c7ac15c2466c9272c3bf69463a30038f92fb94bb8c84da9c67edd4ae8082100197e1fdf9d4328c6971d422f5b0cec870619cb5abe7346fee900a217bf81d55e8ed6b90efd71905e15a8a23f78999866512c805ff11210a6294e3927d2f79ac05f3646d8b2527192a2533d93e176206df4adb11ddadba38567472f2b791351a4ba2aa3dea3740eb748752dd24ce78f44c7242cba926aa39", 0xae}, {&(0x7f0000000200)}, {&(0x7f00000004c0)="69ae72b5d9437ee7a9202b286c96d314a3fdd97857", 0x15}, {&(0x7f0000000500)="5b99a28daf3f1bd34adebafdce94eeaf04ccdb43e70da6f7", 0x18}, {&(0x7f0000000540)="266f9037cb37e178752d7f1bb6f190c0225f9c645ff086ccf5b8c783b4d7741b38ffa3605ee4f3781981b918aa6c600dfaf8202cd16038ded8d81f89de4594641c10d07fe865bd9a74134a33bc6da7960fabef48c5dda8114c89722846b5682ac85bb85099fbdba108f36b1ca61f69e30759d63eeeead3a296aa4368ea154bbf771aef28e7116a490cf99e5734ed4b90b7784b7f71bd5cc755205790a21a06a795f0c25a6ea816895cff77949edc5e9762eb116b9d0775be5b664be8ccb3efab3f706a99b634332d", 0xc8}, {&(0x7f0000000640)="a3d6592b50e4287ab874c7c3ece949b138de65e93c3378997c17a440512ccce30f5780ade79f544cafd808b5f6ac60a7a7b9689f5c4a5d975596fc3a2fb86a078484d411ea4a33bf0ab03667e7b13aec081f4c3ecb", 0x55}, {&(0x7f00000006c0)="d9ef11c06527b3e2c6b1bd366faee6c27e0271774ca1d587140d02f1b5871265cb21270775aae71d6791aa76b44774543b4e61dff56b02062fa220c2b4af29312a32508e2a8055ecd3d6f8bc23ee499c3067be0b8a5e9c796187ffa8754ebc8b4c292f98ad27914eb41c8bce136b8cdc36947a842d09763fd888377cdd8c4c34d7034b5ac4", 0x85}, {&(0x7f0000000780)="d713b21c9d8992ea978dfb12885d7ff52763664cbf331897f99f0df505c97de14405229bdd17cf6042b2bb158db794b2de3c5dbf3e19ea278bda7f2a58cf7cc7e0b18b6adca0a004bea431ce6585060bfb715e60f7c2b132f96a105e2a689e1739dcd4b442078847cf968171c181968ed6fd7920842d16dce6b5ea6649e7a7330271cdbef3a59e4f6c830f3de9d1bd87f769ae97afc7da74dbd99c1304fce1f15b5fecbdef831c0015d0ed034a5db78d140441729d23d8ac1f722fd95523eb1ebd2133e1e5144b8e911ab91d84e347", 0xcf}], 0x8, &(0x7f00000008c0)=[@mark={{0x10, 0x1, 0x24, 0x3ff}}, @mark={{0x10, 0x1, 0x24, 0x5}}, @timestamping={{0x10, 0x1, 0x25, 0x4}}, @timestamping={{0x10}}, @txtime={{0x14, 0x1, 0x3d, 0x3ff}}, @timestamping={{0x10, 0x1, 0x25, 0x12bc}}], 0x64}, 0x499b5af914d7e17a) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r5, r4) r6 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r7, r6) r8 = dup2(r5, r7) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000100)=0x0) ioctl$VIDIOC_S_STD(r8, 0x40085618, &(0x7f0000000140)=r9) accept4(r1, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80, 0x40000) open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x109) 14:06:27 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 14:06:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x2000000}, 0x0) [ 531.322775][ T732] input: syz0 as /devices/virtual/input/input308 14:06:27 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0xf6ffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:27 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x10000000}, 0x20020045) 14:06:27 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x3000000}, 0x0) 14:06:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x207}, 0x20000008) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r3, 0x11e, 0x1f, 0x1000}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={r4, 0x61, "8764257addd65d15bea67f1a9922434711dffe222f3891e5f745e8cf1b8fe2e81688f0d5fb87dc05e677bc63e882cf5ebaa3b2ec1de5e59385da75c8506aa2ace1f3a08e53f12cd0b6a023e0822844ae8b540c211145a244f496f0f9c26cdc24f9"}, &(0x7f0000000140)=0x69) 14:06:27 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0xfffffff6) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:27 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 14:06:27 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x10ff0000}, 0x20020045) [ 531.776296][ T772] input: syz0 as /devices/virtual/input/input311 [ 531.805767][ T771] sctp: [Deprecated]: syz-executor.4 (pid 771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 531.805767][ T771] Use struct sctp_sack_info instead 14:06:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x4000000}, 0x0) 14:06:27 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0xffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 531.912100][ T782] sctp: [Deprecated]: syz-executor.4 (pid 782) Use of struct sctp_assoc_value in delayed_ack socket option. [ 531.912100][ T782] Use struct sctp_sack_info instead 14:06:27 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x14ff0000}, 0x20020045) 14:06:28 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r3, r2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f00000000c0)={0x80000000}) r4 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x2, r4}) rt_sigqueueinfo(r4, 0x4, &(0x7f0000000040)={0x33, 0x20, 0xfffffff9}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:28 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x6000000}, 0x0) 14:06:28 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x8, 0x0, 0x9e, 0x7fff}, {0x5, 0x81, 0xd1, 0xfffffffe}, {0x8, 0x2, 0x1}, {0x0, 0x1, 0x40}]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 14:06:28 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 14:06:28 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x18000000}, 0x20020045) [ 532.309640][ T813] input: syz0 as /devices/virtual/input/input315 14:06:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xa000000}, 0x0) 14:06:28 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000040)={0x40, 0x7, 0x3, 'queue1\x00', 0x5}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xc000000}, 0x0) 14:06:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc004240a, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000000000000000000000000000000000000000000000000000000000000000b9"]) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffdcc, 0x0, 0xffffffffffffff91, 0x0, 0xffffffffffffffe1}, 0x4000041) 14:06:28 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x20000000}, 0x20020045) 14:06:28 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x9, 0x1f}) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 14:06:28 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xe000000}, 0x0) 14:06:28 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x5, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 532.836787][ T866] input: syz0 as /devices/virtual/input/input317 14:06:28 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x24010000}, 0x20020045) 14:06:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:28 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0x1, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x1f, 0x3, 0x6a, &(0x7f0000ffc000/0x4000)=nil, 0x800}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r2, r1) fchdir(r2) 14:06:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xf000000}, 0x0) 14:06:29 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) close(r3) 14:06:29 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:29 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x28010000}, 0x20020045) 14:06:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x10000000}, 0x0) 14:06:29 executing program 4: ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x401c7012, &(0x7f0000000000)={0x9, 0x0, 0x10000, 0x2, 0x2a4, 0x3f, 0x9}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 14:06:29 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:29 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') fchdir(0xffffffffffffffff) [ 533.433603][ T917] input: syz0 as /devices/virtual/input/input321 14:06:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x3f000000}, 0x0) 14:06:29 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x2c010000}, 0x20020045) 14:06:29 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:29 executing program 4: socketpair$unix(0x1, 0x5f853a9dad5b71cd, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000000)) 14:06:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x5, 0x100000, 0x5d}, 0x3c) 14:06:29 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x39) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xb8, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @flat=@binder={0x73622a85, 0x1100, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/17, 0x11, 0x2, 0x1d}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x40}, @clear_death, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x0, 0x0, 0x14}, @fda={0x66646185, 0x4, 0x0, 0x1e}, @fd}, &(0x7f0000000240)={0x0, 0x20, 0x40}}}, @request_death={0x400c630e, 0x2}], 0xee, 0x0, &(0x7f0000000340)="7446a1b678169a9bcf995ebfedd6bb689041ff34282c5cd0c45305b763d55aaba559f742fb5fe607e88a7343287070907880237a7a648f3a38021f7482f9f9ba6dee68be5881f4bf95711561e9332f4162b02faedb7fda1909375bad7b014ba7e780b81cd49506950a48cad57393fd1d67cb8bcb15df40fa4b4170569d1c499a96926f8a12310c1b0c957082d345d02edf5f7a4a0e5abedfcb15049ad5f05818ef3475d15f38b7ec9988b6e681aa9558f24b2512ec7a610309ec819399c773be89bdb8b13204b52309872649524e9691e176fac76f97a76526e54af9c7e08e9c3a61af197bd480b27a3474ab95a7"}) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) 14:06:29 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x30000000}, 0x20020045) 14:06:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x40000000}, 0x0) [ 533.905202][ T958] input: syz0 as /devices/virtual/input/input324 14:06:29 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 14:06:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x60000000}, 0x0) 14:06:29 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x38010000}, 0x20020045) 14:06:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@loopback, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in=@local, @in6=@mcast1, 0x4e20, 0x9, 0x4e22, 0x0, 0x2, 0x0, 0xa0, 0x2c, 0x0, r3}, {0x100000000, 0x10001, 0xaa3, 0x3, 0x0, 0x9, 0x80000001, 0xc0}, {0x4c, 0x9, 0x9, 0x480000000000}, 0x3, 0x6e6bb4, 0xfbdd040d88f89181, 0x1, 0x6}, {{@in6=@local, 0x4d4, 0x3c}, 0x8, @in, 0x0, 0x0, 0x2, 0x1, 0x2, 0x6, 0x7f}}, 0xe8) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x80) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r5, r4) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) ioctl$RTC_WIE_ON(r6, 0x700f) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000000)={'caif0\x00', {0x2, 0x4e23, @empty}}) 14:06:30 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x65580000}, 0x0) 14:06:30 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:30 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x38ff0000}, 0x20020045) 14:06:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x81000000}, 0x0) [ 534.431207][ T1004] input: syz0 as /devices/virtual/input/input329 14:06:30 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dt#\x00', 0x4, 0x56567e8ea76d6f03) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f00000001c0)={0x5, 0x4a, 0x1000, 0xff}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0xd) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000000)={0x26, 0x1c, 0x81, 0x0, 0x0, 0x88, 0x7f, 0xfb, 0x7f, 0x45, 0x1, 0x6, 0x0, 0x7fffffff, 0x80000000, 0x7, 0x0, 0x1, 0x9}) fcntl$setsig(r0, 0xa, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000280)={0xffffff87, 0x9, 0xfffffffa, 'queue0\x00', 0xffffff7f}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40001, 0x0) sendmsg(r5, &(0x7f000001afc8)={0x0, 0xfffffffffffffda8, 0x0}, 0x20020045) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1f, 0x1) 14:06:30 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x40000000}, 0x20020045) 14:06:30 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r1}) r2 = getpgid(r1) rt_tgsigqueueinfo(0xffffffffffffffff, r2, 0x0, &(0x7f0000000080)={0x9, 0xfffffffc, 0xfffffffa}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040)=0x20, 0x4) r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7, 0x400780) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) 14:06:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x88a8ffff}, 0x0) 14:06:30 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:30 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x44000000}, 0x20020045) 14:06:30 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = dup2(r2, r1) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r5, r4) splice(r5, &(0x7f0000000040)=0x8, r3, &(0x7f0000000080), 0x5, 0x5c73418a105cde24) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, r6) ioctl$USBDEVFS_RESET(r7, 0x5514) lsetxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) 14:06:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x369}, 0x20020005) [ 535.001321][ T1045] input: syz0 as /devices/virtual/input/input331 14:06:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x9effffff}, 0x0) 14:06:31 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0x47000000}, 0x20020045) 14:06:31 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x5, 0x8880) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x3) 14:06:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xb2050000}, 0x0) 14:06:31 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xccff0000}, 0x20020045) [ 535.431165][ T1094] input: syz0 as /devices/virtual/input/input334 14:06:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000000)=""/231) r3 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x205a, 0xa380) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r4, r3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r5, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:31 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r4, r3) fsetxattr$security_capability(r3, &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v1={0x1000000, [{0x1}]}, 0xc, 0x2) dup2(r2, r1) setsockopt$inet6_dccp_buf(r2, 0x21, 0x80, &(0x7f0000000040)="c613fc18e0f79041f5ce503e23880eb01d3641bad2172854889ab5881eeab9cdfde49d431f514a0cfcf5225ecf6ad00a417f218cdc476e870bde7775ccf4fddb105e4366338386ed356fcce97783263a3e4ad2c9ae4d9fba9676bd63a1c2a4fda7f90050851e0df587121d038a33dd204ca252b136115cc3831005225c85e656f91e1ebb30f2fde52c275289fa8a5b08bf14801d646eef753de8e56796ffd177d388f1be510a4ea6421518c9c45cd833d939d397c7893183881f557c207d4efb767d61408ce2a5ac7ddc2a2c", 0xcc) 14:06:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xf0ffffff}, 0x0) 14:06:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:31 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:31 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xd8ff0000}, 0x20020045) 14:06:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xffffa888}, 0x0) [ 535.928221][ T1145] input: syz0 as /devices/virtual/input/input338 14:06:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000040)="2c988eff2cdb6a46afeeb6dbb906e04c61cb07f1c7facf3af113841420afc3fa5967e95ba4934308d3d17e15aa011056ca264b12da3e2e415a0c93859d7eeebc47493f105ca21a2f7e92fdf284b0683d428c3ed41a919ba7da109a7481b40499d2bf5a519f2622235739339f472c8032a4f96557b7805665c0a7183f25cbcc55d93e8eee0ed739fc154cbb2b86d4666a5ed1d53cc0211a458b2414", 0x9b) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:32 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xdcff0000}, 0x20020045) 14:06:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r1, r0) sendmsg(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, 0x0, 0xfffffffffffffda3, 0x0, 0x199}, 0x20000000) 14:06:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xfffff000}, 0x0) 14:06:32 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xa6c, 0xa0943) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000015c0)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f00000016c0)=0xe8) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f00000013c0), 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x38, r1, 0x0, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8900}, 0x20004000) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x40004) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080)=0x2, 0x51) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r5, r4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, r7) ioctl$UI_SET_PHYS(r8, 0x4004556c, &(0x7f0000000240)='syz1\x00') ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) 14:06:32 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:32 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xe4000000}, 0x20020045) 14:06:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 536.477941][ T1188] input: syz0 as /devices/virtual/input/input339 [ 536.517976][ T1190] input: syz0 as /devices/virtual/input/input340 14:06:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 536.795710][ T1207] input: syz0 as /devices/virtual/input/input342 14:06:32 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xe4ffffff}, 0x20020045) 14:06:32 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x4000, 0x0) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/205, 0xcd, 0x80, 0x1, 0x7, 0x80d97}, 0x11c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0xffffffffffffff35, r3, 0x23f, 0x2fffffc, 0x0, {{0x1, 0x0, 0x700}, 0x0, 0x6, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r5, r4) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xec6a6e459dd6e9ad}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x200, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x40000) r6 = syz_open_pts(0xffffffffffffffff, 0x100) read(r6, &(0x7f0000000000)=""/234, 0xea) sendmsg(r1, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:32 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:32 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x189000, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x31e1, 0xffffff2f}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0x8001}, &(0x7f0000000180)=0x8) 14:06:33 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xe8030000}, 0x20020045) 14:06:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xfffffff0}, 0x0) [ 537.169178][ T1236] input: syz0 as /devices/virtual/input/input343 14:06:33 executing program 4: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xf, &(0x7f0000000000)="6680a70432007edcf25eb2bc9cfaff9047b54200e5333fa63af9585b9649165a83a965b40b91e7b578b291560bea2eb5f3bbb4", 0xfffffffffffffe47) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x800, 0x501803) ioctl$RTC_PLL_SET(r1, 0x401c7012, &(0x7f0000000080)={0x10000, 0x1e000000, 0x1, 0x0, 0xe5, 0x600000, 0x12675425}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x200000, 0x0) 14:06:33 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xec030000}, 0x20020045) 14:06:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0xffffffff}, 0x0) 14:06:33 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000040)={0x80fd, 0x3}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, 0x0) 14:06:33 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 537.796043][ T1285] input: syz0 as /devices/virtual/input/input347 14:06:33 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf0000000}, 0x20020045) 14:06:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) r3 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@empty, 0x4e21, 0x7fff, 0x4e21, 0x0, 0x2, 0x80, 0x80, 0x33, r2, r3}, {0xffff, 0xc00000, 0x3, 0x6, 0x7, 0x81, 0x9, 0xffffffff}, {0xa7be, 0x7, 0xd9, 0x81}, 0x80000001, 0x6e6bb3, 0x2, 0x1, 0x3, 0x5}, {{@in=@remote, 0x4d5, 0x3c}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3503, 0x0, 0x1, 0x6, 0x58f, 0x802e, 0xe2f}}, 0xe8) 14:06:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) 14:06:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0)=0xfc, 0x3) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) 14:06:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:34 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:34 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf0030000}, 0x20020045) 14:06:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) getgroups(0x3, &(0x7f00000000c0)=[r3, 0xee00, 0xee01]) r4 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r4, 0x400454ce, r5) getgroups(0x3, &(0x7f00000000c0)=[r5, 0xee00, 0xee01]) r6 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) getgroups(0x3, &(0x7f00000000c0)=[r7, 0xee00, 0xee01]) setgroups(0x3, &(0x7f0000000000)=[r3, r5, r7]) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) [ 538.362590][ T1329] input: syz0 as /devices/virtual/input/input350 14:06:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 14:06:34 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf1030000}, 0x20020045) 14:06:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x3}, 0x0) 14:06:34 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x100000, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="000026bd7000ffdbdf25070000004400090008000200000400000800010040000000080002007f0000000800020001000000080002000600000008000200bcf8f67c080002000600000008000200080000db1c811e27361b11221c003800050034000200080002000008000008000200ffff0000080004000100010008000200030000000800010001000000080001000a000000"], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r1, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x10c, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x30000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4e}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @local, 0x6d8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x40, @mcast1, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x10000) 14:06:34 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) membarrier(0x1, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080)=0x1) dup2(r2, r1) 14:06:34 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:34 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:34 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf2030000}, 0x20020045) 14:06:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 538.881506][ T1376] input: syz0 as /devices/virtual/input/input353 14:06:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x101000) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000040)={0x0, 0x0, @start={0x5}}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:34 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:34 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf3030000}, 0x20020045) 14:06:35 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) r5 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f0000000200)=""/116) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r4}, 0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r4, 0xe}, 0x8) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, 0x0) 14:06:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x6}, 0x0) 14:06:35 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:35 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x109800) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$pokeuser(0x6, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r2, &(0x7f000001afc8)={0x0, 0x0, 0x0, 0xffffffffffffffc5, 0x0, 0xffffffffffffff41}, 0x20020045) 14:06:35 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 539.290608][ T1412] sctp: [Deprecated]: syz-executor.2 (pid 1412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 539.290608][ T1412] Use struct sctp_sack_info instead 14:06:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0xa}, 0x0) 14:06:35 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf4010000}, 0x20020045) 14:06:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x240002, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x82, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x7fffffff, 0x10, 0x0, r4}) dup2(r2, r1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0xb4, 0x80000001, 0x7, 0x5, 0xfffffc00}, 0x14) [ 539.456065][ T1429] input: syz0 as /devices/virtual/input/input356 [ 539.555375][ T1428] sctp: [Deprecated]: syz-executor.2 (pid 1428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 539.555375][ T1428] Use struct sctp_sack_info instead 14:06:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0xc}, 0x0) 14:06:35 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf4030000}, 0x20020045) 14:06:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:35 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r2, r1) setsockopt$sock_void(r2, 0x1, 0x831aef8eb55ac0d2, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x80}, 0x4) ioctl$USBDEVFS_BULK(r1, 0xc0105502, &(0x7f00000000c0)={{0x7, 0x1}, 0x1, 0x1f, 0x1000, 0x8000, &(0x7f0000000b40)="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"}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) 14:06:35 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0xe}, 0x0) 14:06:35 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 14:06:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:35 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf8030000}, 0x20020045) [ 539.957737][ T1478] input: syz0 as /devices/virtual/input/input358 14:06:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0xf}, 0x0) 14:06:36 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_GET_VERSION(r5, 0x8004552d, &(0x7f00000002c0)) dup2(r4, r3) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, r6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r4, 0xfffffffe, 0x7f, r7}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, r0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f00000000c0)=0x100110, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40c00, 0x0) ioctl$VIDIOC_ENUMSTD(r9, 0xc0405619, &(0x7f0000000080)={0x5, 0x80, "3fa750df98581a31fbf93d527ea2c7b22f36b73d49de0822", {0x4, 0x7182}, 0xeccd}) r10 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name, &(0x7f00000001c0)=0x10, 0x800) sendmsg(r10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffffffffeb2, 0x0, 0x178}, 0x24028045) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='security.evm\x00', &(0x7f0000000280)=@v2={0x3, 0x1, 0xc, 0x401, 0x31, "a8f350be632e1630074505d041aaf9ab4155a1a8591fa8bd45f8edfdaaadcbdb0bcfc224db25e3a0198ccd1610888f2783"}, 0x3b, 0x2) 14:06:36 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:36 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf8ff0100}, 0x20020045) 14:06:36 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/\x05\x00\x00\b\x00\x00\x00\x00T\fevent#\x01', 0x4, 0x482) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x0, 0x5, [0x7ff, 0x6, 0x4, 0x9, 0xfc01]}, &(0x7f0000000080)=0x12) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x7f, 0x3f7, 0x6, 0x5, 0x80000001}, 0x14) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r4, 0xff, 0x1, &(0x7f0000000080)="18", 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0xa0000, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000100)=0x7fff) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) 14:06:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:06:36 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:36 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 540.386607][ T1515] input: syz0 as /devices/virtual/input/input362 14:06:36 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xf9030000}, 0x20020045) 14:06:36 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x60}, 0x0) [ 540.558529][ T1528] input: syz0 as /devices/virtual/input/input364 [ 540.643765][ T1509] input: syz0 as /devices/virtual/input/input365 14:06:36 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0x6, 0x4) r2 = open(&(0x7f0000000000)='./file0\x00', 0x882, 0x1b0) sendmsg$nl_generic(r2, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x14000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x42c, 0x41, 0x602, 0x70bd26, 0x25dfdbfe, {0xa}, [@typed={0xc, 0x3b, @u64=0x223}, @generic="cfe4ccc03c0f2f501de4808c338e735215f2dd59688888fb68fb65c4a85c4c2311d86e37c25f56bed323c08591e7e69509cc41a8ce5278cc753f2ea2bbb3a9f8ddd18f1715a1fb5a7a76a0f68de4e925ee1ef3ecaea36e2e106ce5d1eeb81da7886e0bcf8139c940c51cbe2f3416cd83b042cc0368f223bf557f7ab2f3b312447061ba04f45eb540ce3615f1e69453fe9548fcae985e32ed4dd7c2207153208801b8daeda1ca35156023ee04d32ff93390390618590e1922a72c85aade752e32fdbe844e335512a1202059634b51", @nested={0x324, 0x5a, [@generic="db36ab759155491ea9d053a98fd3e8cefbc417296c5deb5c6cb5aabe0559d7925d3f1e794c2c28a8880584debf15baa5490e1ac81d4fc11cd4bdd7bb1d2e954a0636c96da64a16b2454052df31a66b0a0c7d96ba2b110013335e4bed1c97e7745aba233c84ac8bc730059bf84d1c9ebe179a9ce92fb93217837a808cc006ecb3c02e7b8a05cfb0ebfb084c16fba5c976aa7f511a4d57f1487d1c6a5abbee2a48164485607e79c62125f29b85545fc750df505730705ec334e4ca3aeb36a41a", @typed={0x5c, 0x85, @binary="ccae421398905efd37bf1eebd0bde095439eec42a27e96998f809847a7ee33d7e998155b63afc0bbf5115ddea18480172f7185389938820fcfbe31481d229c1fafca8b2fb10acc07736b590d447e84a38fbe2445891c79"}, @generic="98d67eb5e3a49b29635566384082e9ebd08aa93f90c223b0a1ebf5700307fb1c301f46ad770d299f0532dca6ed6257b6b0722b7e962a4b0b3ba48b9fcbbbc9a9e9ddd0226319beb89a3c22e71447", @typed={0x8, 0x45, @str='\x00'}, @generic="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", @generic="4454662e8e5fe728345572cb33a76211b214153f78ba79305ab02b4dc8ff3fef8dafb1bd4818b5a9f24aa662c1eeea01170bb5c1f7852b39fa8756c98ec11453096bfd39afc6f612eb748c70b8859852a504a87c280840597056ca11869b5361063f0934f214c5a9b94ab61236821cf628e19fd0a2be98a159a8cd28c7cddda776f34f10dc7d0fab9ae5374f61b7322abeb20a9f78b492734053af611b576e6e752d87cac2871c4c719de4c0f55069667262fd79"]}, @generic="a5b3afc45a077603ff11b0cda4992918425cb7d6c810afb9"]}, 0x42c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r4, r3) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000600)={0x752, 0x101}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="757365722e647b005dde2358568559557893c8c911d95c37e9a904786345b9206222ff1db717184efe3cfb1b47cc8ce72220ea2c6ae025f05e793ad2b8944041a4180e6ae13280e0f770b80e6cd8523595e056ef11baadfc9d2f4ddbfb405346df13b1caf64e27ed2081e570104f6c9c2c7138db474c7c248f2684e371791497a43536cddf6499318d5262072ea9db61a5c42d5a7b10c761ea4936d96744f8e0f9b36a6f5e63afff199835bbb1fd4579"], &(0x7f0000000680)=""/103, 0x67) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) [ 540.684532][ T1528] input: syz0 as /devices/virtual/input/input366 14:06:36 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xfa030000}, 0x20020045) 14:06:36 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:36 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 14:06:36 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xfca00000}, 0x20020045) [ 541.042187][ T1577] input: syz0 as /devices/virtual/input/input368 14:06:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x8) 14:06:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x300}, 0x0) 14:06:37 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:37 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xfcff0000}, 0x20020045) 14:06:37 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0xa7, 0x783140) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="4ac311f305158272b0ac89c3c057c3dd431c83229d030000002e0f1fb5fc58b3ba51a2164dc937e14220ab60cf6b2e5048f8d95664715a764e266cdd822ec7f1e5adbcb2566a87d351b73a4a051f58f84ddbf0c7778164f97a580637cc7a30bf0d33da9acbec1f3de03184f7e21a7f92b84528", 0xfffffffffffffde7) 14:06:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x24802) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x1, 0x2) sendmsg(r0, &(0x7f000001afc8)={0x0, 0xffffffffffffff5f, 0x0, 0xffffffffffffffef, 0x0, 0xffa8}, 0x20020045) 14:06:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x5b2}, 0x0) 14:06:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) [ 541.494671][ T1615] input: syz0 as /devices/virtual/input/input369 14:06:37 executing program 4: socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={r4, 0x55, "65724f38441eb3e2839962fb77bd048dbb080d39ab90f7543412186bfb45d89f0174910c7063dd8ff33432a4f8ee97e96b9acdd60aaf2701e0d462a077070e2b3f17be61634c3268a01895aabce84c3761309e365e"}, &(0x7f0000000080)=0x5d) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e22, @local}}, 0x400, 0x5}, &(0x7f0000000180)=0x88) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:37 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xfeffffff}, 0x20020045) 14:06:37 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x7f, 0xe1, 0xff, 0x6, 0x7, 0x24, 0x7, 0x1, 0xff, 0x9, 0x8}, 0xb) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) dup2(r3, r2) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000100)=r3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r3}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x1000, 0xfc5}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000200)={r5, 0x8}, 0x8) 14:06:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) [ 541.741904][ T1635] sctp: [Deprecated]: syz-executor.4 (pid 1635) Use of struct sctp_assoc_value in delayed_ack socket option. [ 541.741904][ T1635] Use struct sctp_sack_info instead 14:06:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:37 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x20020045) [ 541.872416][ T1647] sctp: [Deprecated]: syz-executor.4 (pid 1647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 541.872416][ T1647] Use struct sctp_sack_info instead 14:06:37 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 14:06:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000000)={0x0, 0x215, 0x0, 0x11e}, 0x40) accept4(r0, &(0x7f0000000040)=@pptp, &(0x7f00000000c0)=0x80, 0x800) [ 542.137339][ T1672] input: syz0 as /devices/virtual/input/input375 14:06:38 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x4, 0x9, 0x0, [{0x3a4, 0x1000, 0x0, 0x0, 0xff, 0x2, 0x7}, {0x0, 0x3, 0xde3c, 0x3, 0x20, 0x81}, {0x0, 0xd76, 0xffffffff, 0x8, 0x6, 0x9, 0xb4}, {0xf6, 0xc898298, 0x505, 0x2, 0x8, 0x3, 0x9}, {0x6, 0x8, 0xffd7, 0x58, 0x1, 0x20, 0x1}, {0x1b4c00, 0x4, 0x0, 0x5, 0x7, 0x35, 0x1}, {0x8d, 0x100, 0xff, 0x40, 0x80, 0xfb, 0x9}, {0x4, 0x0, 0x5, 0x31, 0xff, 0x0, 0x1}, {0x1a, 0x9, 0x8, 0xed, 0x3, 0x0, 0x20}]}) 14:06:38 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xffffffe4}, 0x20020045) 14:06:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0xc00}, 0x0) 14:06:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) r3 = accept4$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000340)=0x6e, 0x0) sendmsg$kcm(r2, &(0x7f0000000840)={&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x3, 0x2, 0xee6, {0xa, 0x4e23, 0x8, @mcast2, 0x3}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000b40)="8f481b388895c67b33a7cd2893a3ea766e9b5ba37c465f2cf67d01a88e6c0a7f301e6cdc24e67a400edfd1ae36836cfd61f7a4a0cd7bc3dcb8140aed2fc7d24e782e496a6c9ae40d6445a5bc46ddaab2cffed9f7fe74c21b0a230b3de9aa8d0cf9af8f4937d2daf2fedfefac806a683e0cf560af1e384e43a699846b1210a60c73d4c15f3680cce44d126c6caeebacca11f05eb9932c91107a51fb790c1ebeb30d6eac46e509b88446fbc17553683de656b2f7976eca0823ee77ddaa590e2c0c66d64a32d809d2105a3f1342d8c7f632e1b6de4c9703eeb7d5ccd827ca2615bfcd2cf616d4191e8e603690a545ee3ad95ab000edf1016a8f3803a2372202c306b01ba867b6b9c7e3aaa3294301d9a61774ca9915ac3cbf302dbf1fe92b1626d4085d85dbd3fd5d5f6c462b4da245a3babaf3f1c0dedf2d47f9e92b7c87f577482f2bd019198fd3a7714c6ff7cd097acae66d0d2a2d73591600017860093b7d558bee36be7a0ab3c0d39562a22f44ab523ee538bf79f597bd97f6200fb43ddbee2051656e119ae1b44c75d3be7b5c001b24b9bd1cce9a2ac32f36752005759fc47946320bffbf1b07b8b2868e82caa0b2f7a2ae58ba4280bd7a36aef5af804854a4c85dd8ce1e21c145163f4febecdb38177ba8667131d865c88dd17de5735ddea833b740e1dd4815c735a2521897bbc49d420b45ebfe3fef859073ea8f01653fdd1eeb2d25cb24aa26a8fd741b60f5d38702df5efbcb9fa952d115e9560eb6cb47a279d6000d34d4ad2e758752cc44823ba7bbc589e5f05b4bf9b962ce7d9826a0841845911f588d726ffeff11f9df97f770419d93568e2fb45e804e0938530a1302a595c0f3ee8dbecd2a0c03f4b2ecf1e691b305da36a93dd53df10f3ac3dc70abc15da5f336a59c68a55793203a3de6c4f233e9d57699c8566303864eab79496d2329b6b3a78e08d5f3bcfeaf276ec3533e317fc1db252ac3f070390fd7996186ebe62a94347f9c6ae22e5f17be554a05777c101d62c85aca82515f91f84e0cd9dadfe73d16257834fa8069913d6ece07ec4b6d72eec366c3afae71d74bc8324a89f14ea38285eb4605c652cde8bcf2d4b659f82eee122104525782476d5caad135b768cedbfae86513edb04c41978226ef10d9eec409a086553fae678b12af32be8fdea8735091db9eff510957f2d6a1710a46fcaf919014a72002d4ff90b39fd7f7575a3938d2dea18227af4fc8d5ac1752d27f231c4cddb755222ac8ba4976c265b06339a3f06922e037b2f57dcf626ca03cd33a2f8fc8e52c4d0b696968b6de0cc3bd7ce7e5374e310c011891e65798509c10caa8908135fdf87c05b35dfa12b83b3281aeba8d651fb4e461167f9a4564dcc252cb76bd7a976b3b06dfa7af738916f2d1ae3e2e88fdae60ad1d08caf5a8791101465cee55fff50856b7b40112eb0a887aa676ed5131781289426ae1a24333cf61fdbb993cb4469b218d844fad84781af0342961533e435e8084d75338a6e94034a387b9e3f8610d2be9cb3a66d1ee22038b3e42d96ed7692c2954bb78a98e1e97f9e004c52e01b7493411c1cf97d56ba6d6398d89c281f8a8879393fed3c3f6038c09e7c7f890dd7b976b4e82175f0654d14bc265092166ac0462053c4b4aa1be859ca9cbf15dcfd99602e8a8febf9560ac9f8ec8f6262da260daaa53716251ec314566865869600b2b948cec58448b9d8875ba8d39f1aa68f699efad179272dcbf83f87f745a77c1d2c140f7eb581268ef341b140eb7a678eca49ae35d5f8c8b9905a1310f4c59d9f68b2bf4ac5c21a0091b50aa53af1d77190bf33292ade5ada46a665d8a414fabebc955c8cdd8684efd689ec89bcc05f06b92fcccbea1dae24bfeabb2b3d03cad8c5eb1321fe40066acd882394c899f7cfaf0b785d344dce56a4eeef14b4622325f73ddacc64d11a4833fe6cb18fbea733b09c71bc8c5c47ec8da8ce40b09ee545358c84b66a19ff0ecf21cd57845d275febe5a5f5c06240ff458a0011471ad785c3720951bf3bdf250613ba91dfab4c2b03773f3effb6f27f0c146afcaca25be56ffb1a2aacb9c89bf0fe7e8ad08b928e1d8abdebed868a8e9662c10b063ba64b16d5b545d7bcc15cc28a5d9b6274ff591342ee134be9242f8b7194861192010e1a282a7a61bdb7370d153d33d1064ebbf4e237b91bd26c9308b504da2d0b4d0d4131dab6ec42f946832d086116fa3652b850fbaa58f2a33c4bae33534d7d2e4981b0686e2b07389217987a861137d59b556545aab31e546c39a2e812f55df5631fb03a3905cbe835b57a0206a5dd0659c411621e096ae0f601d7c9b12b31d77f88bb64c94e2b6f8a7292eca276a89732ba6916f34a6d54378a6d515368571bb4038252b4d7e0ab04e37320fd97e9ed6cd17afca23398bb6d3552769aad443e9d472070bc85aa145617d4a0830c272ad51e9fe8466a1cf2992a6d7df798b835193305ac33ec42c39f3abcb3632160fbfc7b7a9a79eff3951b276f496368601e6f779dd2da1ca1e3fe186800f6e8ebc80ea8cf6f40af7070db9d657ab3d9d1c907f4c3b7cc01d5aaf3eeb18893f4d38ab69c3c0353de0a0ee1761b145e0893175276c7cfa12b7f71968e0cff1edda4fbe8832ff63e66e3b0c8ec2aa96f5baec74e4e04b01b6ccd1ef61134582304cccf962242e9551750a63edc2b52b61ba09bb2ef209e3f948e4ac77ffe5176717a4890af55775ee6ec501f752dce19a631716d1ddd8b154350d821bfadf229fd6026bacf8bdf96f296474ff3c297d55fcb0fd4aabc4761735de0ff6b9203f6594487ff29b8dcfd18cd86a20ed6256121e17c506193464260591bb1baf7c4f254b00810fee8fb6ca62d4219294addfa8df8f6bf6e74cc49b5cf18ab3ed1f1191eb48b11d6b6ccc2810f10f0027354bd9944c12809b2ea0c0a781c71ca0bf04b3f6c6fd682b2af95428c544156bfbc8ecf9b2ea18c5171eb00af66d17bd3a676c307ec2aa564db1b9a4faf0d18128300a0eea31610bdaa57ec1e2acdde196e8a759a6acc2085cdcbedd95027ab161e852e51da10c7fcf9c5a81097295bd48c69b042034413dadae73247ca9675a3519ef39fc3da5107c3a2561f7e67a7efb3df518bdcc6d253783e2397bd01d4a7c0f777f2d3366af9c4d552eacc0cca05c93da26614d3e60cca40cc6443e2c725532f3820c400ba9e822b1878580934eb889c09b92426c9789690bfc480a61f1c4b3d5960741ba341adc34d4132259c4a4875e46b65c83a5b170fe2613c5e0da56cae6d5d41c2324763527ca56528c4a30650e4c419dfc7f2094428fd0146ef48038903747592dc3ef69be8162b9f0e1a12ddffcb879a1c16cb61eea5ca8e30c5471ed6d16763c8783ee7bd8e4db76529096bec78fd5bd5700e49d86cf9c82348dd385c3ea25f8fd841cf9188cd4ed933ba0358a908764cdb40d7dfb7021d44602294fcc7a47a0be38bf666b3ee489364c22f43ef8856fa47462a9606d85a92514f0f8e18ca1acb826ee50b429dce463ccac5c43788f579545edc35f91998281cbbe4de3e18f3f4844c6edf072bc3e118abc4a970c1736631ed69076887cd2703053edd7b2631f4448dd9f187e640541136389d701b339782e89059849125e8241fa830e440108471cc9a5dc350a7e0019bc5f2e54c7b8b0f447c1ff347640efa04284251247b731e3469ad44bebc3ea43a58391b95747bd79b9cb92a2f44d9ec04a0d6e68af60ed85071310740f96021de55c361e34e1a854abff6de7e403ac9d6a2b0bd91071ebf8c08b1f4dec3c413941c94bc1535123f7d945be5da13fe85b289ae775a94c7cec6417746887de0eae6f5ace8e259eed6ff264605b1066b2665731df6f59914a4af3248c0c4b673f0dbb4a9e8e4eaa0994e4cbe5b6a38e464b1f9279e5850e27329f6ecdd22657cb4767c36d1722cdecf7b7ea699ad917732b79f647d4b127b29d4437885c03facead256baaa31f8956c82b171ae99bae81518ae2b60b6863d5c584b8b25815b2bb161c20e45b8362d5ec288fea1b627dd4330c3e6b6f6071a0d2a5cf4680c8c5f97960de16677edf419bef42e2deaddc879d193c8ad2738c6199ae8ddeb5fbb9f1251e90c3cbec54125e842e26d554e9edcd04ba3153415958de7b7555bf742e3411acb76ca8d68f91803a505b33bbe0bd7aca7811a5ef16408cb65aa7774d82e1163b245360166ab8330a4e731c4b9333809bdd7145caad21dceaca483cd162f749251ec0b42cb1912ee77af3288f80f512937f35c4874b2e258efd58b9a336c9e781a922004a53c335af9adeeea66d59f597343db5b8e106ac5e23294e2410639620b8efcc44559c1447a4a50e05290fbfa607f74c50d7af4518df40f6cefe7b2dadce5b4563fea8c389e4494bdb967e79630002749bcba69bd91901a6597407907ea44b82a6c39077631b58c35238f64c6638907a87c2271e3a08c146e3efefeb27f13e3e0bebbaeb9e47d6f1137efaeca92dd4c4d33371db03606431545502a92c330ff90bf24da0a07baacb0063cf7796d1c9b4600772d81a0e9c47f6a62463fd5b3269edac8ff95849fc9bc5eb432b23a98d02c104f0c0461ac383b24eb118dcd2fca5267301cddb58b22d3f7e00617431f7d02518aa52ba06c7df65d1ba36dcdf408816aa42086a4c5bfaf98c92f181691fcb4cc63f284c230266cdb51bc94f66c26254a550f811be7e39b4d677bbc7ff28485e8e9f8f39d3b1f0764537cb0a459546f6596c9411fd95e485144a9abf27b3e0548a30473257b670a3a6dee53cd118254188c35e8643b3dbbecc9f8187c579fcaa5861d4aeec785bbd21e61bb811dcb003de8a533654f15df564407acedefca7a1e1b13ea450a0eca3cf94170c8d885727a820996aed7bc6ae28890fe898a26f6bacc5f36fe7fb7291f9dc3055ad394893a1a3611bfced49237e443d9f882da5f54f453e8737fef854b71162bbe7757957d36274ee6df0186ca01bb5d30e253eff7f517d423017265c7390ad19e1d9ce5fb798e4a3163983bf224b84afee852f9e5637f86211c4a87ddaa2ce16d5ca363605fa4a77c0404efa0035b7a6c1ab8d1075823bc35afa509cab209dd987b454faefbd87092cfb41716b57cb4a3f091c91257ffa9269b7391b4efbcb44e227fd3317c0e0e211455dddfc9c76197a87d00647342181af91d8eb2263c03a7692be51466da87954fa7e85cde18c23af5d2c88b223a332764bc05b7092ed4929235fa549a53a22ed9c7b822148f8170e012323cd44fab36c94d43ab6b907b3331b4933fb23290fc8aa4eaa87464369e627c00bbbc0dd69dc43d039136a6b2fdec63990b03be4855d2812774fa3ba9090ac49adc8ae66d5529e446e6e4948e8e30831314d1ff2f8edfc188a2beb267ee2953ad6d290b2f33f5d302ae48549dfe15772dc2e4f90425ead8a94c105c677a4d88b3b27c641653a43f39cab191289a267d20111425d9376883ace9c0d95ced158da6da441788ed10b60132ba234aa8bc71fc7d42de947ed63b0c5ad407d3463ae74c473400c03e5771313f9c6ecdcdcdddb76564046e000e946af63dd2ac062bff04df1d6a67b2b4471c3bc98ebd1b8f55486f54734a0c75bd0d4a60a5215fd0a78ead591d791d95e3f22610785ca2f3343abe72ccb3d674852a1da3740cd2d2fc5a194cfd2168723677090a2fe5445972a9f960ef6325b393935798d38492b85671a42efdf352649cce10c67af4818e8d3f1cd62195450184c6cf77e31e08b5273ddf7", 0x1000}, {&(0x7f0000000400)="f45f8d11665c40d3b82b29dc7933abafe08981ae6e2225d20c874dc2216cd6c740570241a624c1aeed1d2f5e9e9cb4ae5552b093b861ec21afe16651538f858eab9ce4ae5e492676a79fb7920589e48ec855cb835faf512230bb6676ffcd90fb0c96e18b687c5753fe9ae57abfbeb7cd4433721349b16cad8769ed51f89203a1da5085f2cf00b6b274b7b9df0b78e0d3776cb6dc1b87e32adbd5877a05efd99e5800761fd0714f343cfb3e90aab574e8d7373c3cbfd7200052ff398be008ae7bcf3f3374049a72b65feb810c0f3d49261106a935511dc5aeb2", 0xd9}, {&(0x7f0000000500)="c239416d7e1b95aac767d7626d8b2bb1bf7d12cdd2a1cced29057ebe4a3c0ca136c71585e925530225ff3165fbd5866e01204f5783430a1458a9c527fa7836e59c579d88f3b1c29418da5103984518fdfd06f234f052ce52e460b4515a36caf80d0471074d9ac01edd004ad029e012b3714587728ac327109985c8090ce2758922b87d24ecf87faf08a88f337aa39794c68f0feea9962aa2902ff3fb2b8ad50c400023f11137d01d2d5b3b0f145a6bff9355267929151f220064ce870a4f245e218306b1ded87fe17f4f326ef1fb9c5ca8ef37c70109c624604ea6b2e3", 0xdd}, {&(0x7f0000000600)="d0b7b95960ea4b3502abb3fddd2e7590cb27e8ae6415ee97522f5ad4764f3873e3b6b9746b82c966cd3cef7ea406f81424f7da09c84ff03bb5197cd46ce5760143970feb2b11c42df5afd0aef18de8f3cd01057ccd3cc62d3a66cc5f95c1761b3ed336d77bebb39bb756fe0abe2518cdf39289f9c22ce63b2251247c8900605aecdc3b187ebc33dbb994a9cd3a2d28985b2659c2209906b89c0fe1d6239cbd09f3011e7cd218d58e6cda58803536beeebd", 0xb1}, {&(0x7f00000006c0)="ad6ea7edd12d7a9cbbc765b9019c574f46acd8d1c652dde1185be973a8f5ae7944c1cb897f197ceaf07babbe8e19e4d1160ec47e6b26db7626c2e12ae80612ce07a95bde91d172632958719c2938eb435de2942ea0b8a1a54cc82c7e7087", 0x5e}, {&(0x7f0000000740)="d2fe94e76f593b67ca7f6d23cec9c3ffe908bd9708e2cf8c302f43ebc38930e1215fe4eeb066ca542c81fd04fe95320a3e6fc1ad044db9cfaa7520b6b780e623674e830516af22ad2b18c9fb7b7dd4bb01b1cbc7ad1c2c4a16cd865888f948dd252004b97d05b07cde02da063400081558d6ada3f9b39107b4b120d7fea90dba4baa5de03852f30946ce5e5f", 0x8c}, {&(0x7f0000001b40)="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", 0x1000}], 0x7}, 0x10) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb78d209008bd753da726dd4056c1d9f6d270dd6cb481437f2ec850d85cd7bbb6dc267abd857e2657d94be420dcec6248d70c5e2855cf6f58d35b189928cabe016fe54bc711da98501fb1ecb8316fe0d0dba7826650cfa9d07c0629df48cfa7bcc03b59e03e47836ab3beb50dc930e08f10c84f5c34e70"], 0x78, 0x2) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x400, 0x400000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r6, r5) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, r7) ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000280)={0x1, 0x6, [{r8, 0x0, 0xfffffffff0000000, 0x8000}, {0xffffffffffffffff, 0x0, 0xfffff000, 0x10000}, {r4, 0x0, 0x100000000}, {r4, 0x0, 0x8000, 0xffffffffffff6000}, {r4, 0x0, 0x10000, 0x10000}, {r4, 0x0, 0xfffffffff0000000, 0x80007fffc800}]}) 14:06:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000103], [0xc1]}) 14:06:38 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:38 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x800, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:38 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1, 0x0, 0x0, 0xfffffffe}, 0x20020045) 14:06:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 14:06:38 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1}, 0x20020045) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x3, 0x5, 0x6eb58d0792d940af, 0xcbe, 0x1000, 0x1, 0xffff982a, 0x8001, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r1, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e22, 0x0, @mcast2, 0xefb}]}, &(0x7f0000000240)=0xc) [ 542.767703][ T1730] input: syz0 as /devices/virtual/input/input379 14:06:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 14:06:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, 0x0) 14:06:38 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) fgetxattr(r1, &(0x7f00000000c0)=@random={'system.', 'team0\x00'}, &(0x7f0000000180)=""/136, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r2, r1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@remote, r3}, 0x14) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x8082, 0x184) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r4, 0x1, 0x0, 0x1000000}) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x402) 14:06:39 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 14:06:39 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1}, 0x20020045) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={r4, @multicast2, @multicast2}, 0xc) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@get={0x1, &(0x7f0000000200)=""/74, 0xdac}) 14:06:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, 0x0) [ 543.270179][ T1775] input: syz0 as /devices/virtual/input/input384 14:06:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x20002, 0x1) getsockopt$inet_mreq(r1, 0x0, 0x0, &(0x7f0000000100)={@remote, @empty}, &(0x7f0000000140)=0x8) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r4, r3) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40104}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="58010000", @ANYRES16=r4, @ANYRES32=0x0], 0x3}, 0x1, 0x0, 0x0, 0x44000}, 0x806) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) 14:06:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 14:06:39 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x5, 0x400) ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0) dup2(r5, r4) ioctl$VIDIOC_RESERVED(r5, 0x5601, 0x0) dup2(r2, r1) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r7) ioctl$VIDIOC_G_MODULATOR(r9, 0xc0445636, &(0x7f0000000340)={0x1, "0711ca0fbbf2271ae050274524d0ef8a3b2b70670b5a4c173eedce86ad92307e", 0x10, 0x6, 0x4, 0x2}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000000)=0xe56, 0xfffffdba) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00') ioctl$sock_SIOCGIFBR(r10, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000200)=""/162, 0x3e66}) r11 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r12, r11) write$evdev(r12, &(0x7f00000001c0)=[{{0x0, 0x7530}, 0x14, 0x8, 0x3ff}, {{0x0, 0x7530}, 0x15, 0x101, 0x1}, {{0x77359400}, 0x12, 0x9, 0x80}, {{}, 0x12, 0x80, 0xbd1}], 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@ax25={{0x3, @null, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="95", 0xfffffffffffffed7}], 0x1, 0x0, 0xfffffffffffffff8}, 0x20024045) 14:06:39 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'system.', ']+\x00'}, &(0x7f00000000c0)='nodevnodev\x00', 0xb, 0x5) 14:06:39 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, 0x0) 14:06:39 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0xb8, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x7f, @loopback, 0x101}}}, 0x84) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r4, &(0x7f000001afc8)={0x0, 0x0, 0x0}, 0x20020045) r5 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r6, r5) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000140)="8461ee531d0e3d8b9f1a5d16fad3a090", 0x10) 14:06:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x5865}, 0x0) [ 543.849342][ T1841] input: syz0 as /devices/virtual/input/input388 14:06:39 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x84000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:06:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 14:06:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x0, 0x5, [0xc0000103], [0xc1]}) 14:06:40 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r2, r1) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1}, 0x20020045) 14:06:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x6558}, 0x0) 14:06:40 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x5, @empty}, @in6={0xa, 0x4e21, 0xe5, @ipv4={[], [], @rand_addr=0xfffffffb}, 0x1000}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @local}], 0x88) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000100)={0x9}) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, 0x0) 14:06:40 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) pipe2(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:06:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x0, 0x5, [0xc0000103], [0xc1]}) 14:06:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x8100}, 0x0) 14:06:40 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc004240a, &(0x7f00000000c0)={0x2, 0x0, [0x0, 0x0]}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1}, 0x20020045) [ 544.458887][ T1893] input: syz0 as /devices/virtual/input/input391 14:06:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0xb205}, 0x0) 14:06:40 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1}, 0x20020045) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dMv/input\x12\xa6Sh.6\x8dR', 0x0, 0x80) r2 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000002c0)={{0x3, 0x1, 0x0, 0x3}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x50, r4, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004020}, 0x0) 14:06:40 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\xff', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x0, 0x5, [0xc0000103], [0xc1]}) 14:06:40 executing program 4: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 14:06:40 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, 0x0) 14:06:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x34000}, 0x0) [ 544.958062][ T1942] input: syz0 as /devices/virtual/input/input393 14:06:40 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup2(r2, r1) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x7d, "8141c4bc891fd11774b18a4e3a0c04fdd43c0b803bea8dbfef2d0c58cd9d19b7ac61be626ceae86f318e15aced5933c79dc5fe0efcbf811b9fcf2c97b7d00150910ba7c3deae25206f9512b4fd2bee2da458a1296bb7033ffa28ec6215bbb3e304b1feb0f1d302dc4320b7a2b38f575d91f9085a1d2f55c4745860c60f"}, &(0x7f00000004c0)=0xa1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) dup2(r5, r3) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e415cef0a0a360d483b4f4000000", @ANYRES16=r4, @ANYBLOB="00082abd7000fedbdf250d0000000c00010008000b0073697000500002000800080001000000080003000000000008000900a900000014000100fe8000000000000000000000000000bb080002004e200000080005000100000008000d000300000008000d000100000008000600020000000800050003000000080004000180000008000500070000000c000200080006000500000008000400ff01000040000200080002004e24000008000600ffff000008000e004e200000080002004e210000080002004e21000014000100fe8000000000000000000000000000bb"], 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x28084081) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1}], 0x1}, 0x20020045) 14:06:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [], [0xc1]}) [ 545.056525][ T1946] input: syz0 as /devices/virtual/input/input394 14:06:41 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 14:06:41 executing program 4: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:41 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$security_smack_transmute(r3, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x3) dup2(r2, r1) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000040)={0x0, 0x0, {0xffffffff, 0x1ff, 0x3017, 0x3, 0x8, 0x1, 0x0, 0x2}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 545.336831][ T1975] input: syz0 as /devices/virtual/input/input396 14:06:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 14:06:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [], [0xc1]}) [ 545.524837][ T1986] input: syz0 as /devices/virtual/input/input397 14:06:41 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2) connect$rds(r1, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, &(0x7f00000000c0)=0x34dc5affbbb58a43) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000280)={r2, 0x9}, 0x8) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r4, r3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000440)={r7, 0x36, "2192a3193f1f70fd639ea1c3d85c8390383aa10a2009c2f80f8503bfe79dd9c9840ea1f3cc46dded32361450148186b1fa92cb057b7d"}, &(0x7f0000000480)=0x3e) r8 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) dup2(r9, r8) fdatasync(r8) getrlimit(0xb, &(0x7f0000000400)) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="37ff3246dd1538e1af572c48ffc90d1ce01956e1df32c4ecac2cab2320b87321488c6c118e87e075f5d0698552f05aaddfdaf6f1f7b5f6c85ca20d0ac88ac42af89f7741f4aca3e5a8f198d60f8e2b59f0b2af682bf99cf52e7dc397d17261e13cfa5c0aaa6c6a6a648ef61b969bc49308234d18901a2383bb1a8e22ff512b49cd9427e05533bfe260e10d282279ca4529ec9206a6e58d53e2fdada05c0b2aee99cf92d557b5d878affeef8e679211b1d1ab87e2fd2db3fa915dd82b337ebb7c6e3a7bf1e1ce620beb72f900675cb1f9fd066e", 0xd3, 0x100, &(0x7f00000003c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x7a, &(0x7f0000000600)=[{&(0x7f00000001c0)="95", 0x1fff8}], 0x1}, 0x20020045) 14:06:41 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\xf6', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:41 executing program 4: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 14:06:41 executing program 2: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xffff, 0x101182) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180)=0x1000, 0x4) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) finit_module(r4, &(0x7f0000000080)='/dev/uinput\x00', 0x7134b4982c93eb9) [ 545.807961][ T2019] sctp: [Deprecated]: syz-executor.3 (pid 2019) Use of struct sctp_assoc_value in delayed_ack socket option. [ 545.807961][ T2019] Use struct sctp_sack_info instead [ 545.842373][ T2016] input: syz0 as /devices/virtual/input/input399 14:06:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [], [0xc1]}) [ 545.956696][ T2026] input: syz0 as /devices/virtual/input/input401 14:06:42 executing program 5: syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:06:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 546.081868][ T2009] sctp: [Deprecated]: syz-executor.3 (pid 2009) Use of struct sctp_assoc_value in delayed_ack socket option. [ 546.081868][ T2009] Use struct sctp_sack_info instead [ 546.129922][ T2037] ------------[ cut here ]------------ [ 546.136107][ T2037] refcount_t: increment on 0; use-after-free.