x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r4 = syz_open_dev$vcsn(&(0x7f0000002c40)='/dev/vcs#\x00', 0x8, 0x2000)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000002cc0)={<r5=>0xffffffffffffffff}, 0x2, 0x100d}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000002d40)={0x1, 0x10, 0xfa00, {&(0x7f0000002c80), r5}}, 0x18)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000002d80)={@remote, @rand_addr=0x1c000000000, r1}, 0xc)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r6 = getpid()
fcntl$lock(r2, 0x27, &(0x7f0000000000)={0x1, 0x7, 0x775, 0x7, r6})
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:26 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000b40)='system.posix_acl_access\x00')
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8)
getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=<r2=>0x0)
getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=<r3=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8)
r5 = geteuid()
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000680)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000900)=0xe8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000b80)={<r9=>0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000c40)=0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000c80)={r9, 0x7}, &(0x7f0000000cc0)=0x8)
getgroups(0x6, &(0x7f0000000940)=[0x0, 0xee00, 0x0, 0x0, 0xffffffffffffffff, <r10=>0xee01])
getsockopt$inet6_buf(r0, 0x29, 0x26, &(0x7f0000000ac0)=""/23, &(0x7f0000000b00)=0x17)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, <r11=>0x0}, &(0x7f00000009c0)=0xc)
getgroups(0x7, &(0x7f0000000a00)=[<r12=>0xee00, 0xffffffffffffffff, 0xee01, 0xee00, 0xee01, 0xee00, 0xee01])
r13 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$apparmor_current(r13, &(0x7f0000000d40)=@profile={'permprofile ', '\'selinux.\x00'}, 0x16)
lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000a40)={{}, {0x1, 0x3}, [{0x2, 0x2, r1}, {0x2, 0x4, r2}, {0x2, 0x0, r3}, {0x2, 0x0, r4}, {0x2, 0x2, r5}, {0x2, 0x2, r6}, {0x2, 0x1, r7}, {0x2, 0x3, r8}], {0x4, 0x4}, [{0x8, 0x6, r10}, {0x8, 0x2, r11}, {0x8, 0x5, r12}], {0x10, 0x2}, {0x20, 0x4}}, 0x7c, 0x2)
r14 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r14, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
lstat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0))

05:43:26 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:26 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070")
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
read(r1, &(0x7f00000000c0)=""/137, 0x89)
close(r1)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0)
fcntl$setstatus(r1, 0x4, 0x800)
splice(r1, 0x0, r2, 0x0, 0x200, 0x0)

05:43:26 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000180)={'nat\x00', 0x0, 0x3, 0x9, [], 0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}], &(0x7f0000000000)=""/9}, &(0x7f0000000100)=0x78)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:26 executing program 4:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffdf5)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe2, 0x4)
r2 = syz_open_dev$admmidi(&(0x7f0000000780)='/dev/admmidi#\x00', 0x401, 0x10000)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x400000, @ipv4={[], [], @loopback}}, 0x1a)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x800, 0x0)
ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f00000000c0)={0x3f, 0x4157, 0x5, 0x8000, 0xfffffffffffff3b1, 0xc830})
epoll_create(0x4fd)
accept$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14)
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000280)={@mcast1, 0x50, r4})
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={<r5=>0x0}, &(0x7f0000000300)=0xc)
process_vm_readv(r5, &(0x7f0000000680)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/131, 0x83}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000000540)=""/191, 0xbf}, {&(0x7f0000000600)=""/72, 0x48}], 0x5, &(0x7f0000000700)=[{&(0x7f00000007c0)=""/196, 0xc4}], 0x1, 0x0)
openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x16d000, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
accept4$bt_l2cap(r2, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800)

05:43:26 executing program 5:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x12, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000000c0)={0x4, {{0xa, 0x4e21, 0x8, @mcast1, 0x3}}}, 0x88)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@mcast2, 0x7f, 0x0, 0x2, 0x51424c9e1372b7f4, 0xf8c2, 0x7fff}, &(0x7f0000000200)=0x20)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
r2 = msgget(0x0, 0x420)
msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000000)=""/110)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000280)=0x6e, 0x4)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x101200, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000340)=""/187)
ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0)

05:43:26 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getpeername$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x400001, 0x0)
ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000180)={0x10000, 0x4, 0x1ff})
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0)

05:43:26 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000040)=0xff, 0x1930fdf6f1957938)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:26 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
r2 = msgget$private(0x0, 0x400)
getresuid(&(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000300)=0x80000000, 0x4)
msgget$private(0x0, 0x59)
fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8)
fstat(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = fcntl$getown(r1, 0x9)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000380)={{0x4, r3, r4, r5, r6, 0x80, 0x5a8}, 0x7fff, 0x800, 0x8, 0xb, 0x7beb, 0x1, r7})
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c)
r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0x4c083, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000440)='hybla\x00', 0x6)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:26 executing program 5:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000101d01d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:27 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x8b00)

05:43:27 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000001680)=[{0x0}, {0x0}, {&(0x7f0000000200)=""/3, 0x3}], 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:27 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={<r1=>0x0}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0x100000001}, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:27 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:27 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x2, 0xffff, 0x0, 0xae73}, 0xffffffffffffffd3)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x400)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:27 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x804, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x200000)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000000c0))

05:43:27 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983040000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:27 executing program 0:
r0 = socket(0x1e, 0xa, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x10, 0x80005, 0xfffffffffffffffe)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:27 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001f40)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/123, 0x7b}], 0x1, &(0x7f00000001c0)=""/240, 0xf0}, 0xffffffff}, {{&(0x7f0000000340)=@xdp={0x2c, 0x0, <r1=>0x0}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f00000003c0)=""/230, 0xe6}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/242, 0xf2}], 0x4, &(0x7f0000001600)=""/220, 0xdc}, 0x1}, {{&(0x7f0000001700)=@nl, 0x80, &(0x7f0000001880)=[{&(0x7f0000001780)=""/8, 0x8}, {&(0x7f00000017c0)=""/147, 0x93}], 0x2, &(0x7f00000018c0)=""/88, 0x58}, 0x9}, {{&(0x7f0000001940)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000019c0)=""/134, 0x86}, {&(0x7f0000001a80)=""/198, 0xc6}, {&(0x7f0000001b80)=""/121, 0x79}, {&(0x7f0000001c00)=""/217, 0xd9}, {&(0x7f0000001d00)=""/150, 0x96}], 0x5, &(0x7f0000001e40)=""/200, 0xc8}, 0x12ce}], 0x4, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000002040))
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000002300)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, r1}, 0x14)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002100)='/dev/rtc0\x00', 0x80080, 0x0)
fstat(r0, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
mount$9p_fd(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000002480)='9p\x00', 0x100000, &(0x7f00000024c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_none='cache=none'}, {@debug={'debug', 0x3d, 0x5}}, {@version_9p2000='version=9p2000'}, {@aname={'aname', 0x3d, '&GPL-'}}, {@cachetag={'cachetag', 0x3d, 'bdev'}}, {@cache_loose='cache=loose'}, {@afid={'afid', 0x3d, 0x10001}}, {@cachetag={'cachetag', 0x3d, 'obj_user'}}, {@cache_mmap='cache=mmap'}, {@loose='loose'}], [{@obj_user={'obj_user', 0x3d, '$,vmnet1procmd5sumtrustedbdevnodev)!-^wlan1%cpuset'}}, {@euid_gt={'euid>', r4}}]}})

05:43:27 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7ff, 0x6, 0x20, 0x3}, 0x5)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1cc, r2, 0x519, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff22}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0x11c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x40004000000000}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xc1a, @loopback, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @loopback, 0x9b0dec8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3d771c23}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001)

05:43:27 executing program 5:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000300e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:27 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = shmget$private(0x0, 0x2000, 0xe19e95c31b722a3a, &(0x7f0000ffe000/0x2000)=nil)
shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/53)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:28 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x8b01)

05:43:28 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x400000, 0x0)
getsockopt$sock_int(r0, 0x1, 0x1c0bd53e75c1267a, &(0x7f0000000100), &(0x7f0000000140)=0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4a5, 0x10000)
write$selinux_attr(r2, &(0x7f0000000040)='system_u:object_r:login_exec_t:s0\x00', 0x22)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x7, @local, 0x1}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000200)="1e5a6207c6481cce2cba5bb947583bd150647d1bb84648c71202b332e7842f8fafb8fa0114658c8248eb6035447f847b7ebe54ae7475e7b86e7ddc4d3f953504286958f99c1278906a03fd0a318ab8603a57cdd79b2ded1fbb684640665b8646510ab6a0b700cf43ec68e8fb49f5addaf00920f6f5430f98a46c599a7674a67644055a839ce61f9ff937a3b6f28eb879f0abaff36e4d43bd9ceae4cc593c2dc0bcd698bf60ceda51127ff7689a950641681b288e0940cf9c53bcccac630de3d565837f3ebaa662ef96ab6f7009b6c02dfe54592e7769d8d01fde6a930a84ea795b233650b5a55fa429b5a7647619de725fc658", 0xf3)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:28 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x5}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3f3c, 0x3ff, 0x3, 0x12f}, 0xfffffdf9)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @null, 0x5, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@loopback, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
prctl$PR_SET_KEEPCAPS(0x8, 0xfffffffffffffffe)

05:43:28 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:28 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x3, 0x1e83a5bd, 0x3, 0x5, 0x7, 0xffffffffffff4cbc, 0x6}, 0x4b)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:28 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070")
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
read(r1, &(0x7f0000000340)=""/137, 0x38)
close(r1)
openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x40100)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0)
fcntl$setstatus(r1, 0x4, 0x427fd)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
splice(r1, 0x0, r2, 0x0, 0x200, 0x0)

05:43:28 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
finit_module(r1, &(0x7f0000000000), 0x3)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000080)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:28 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0)
ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x0, @null, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x10000, 0x5, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:28 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x1c)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000100)=0x81, 0x4)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x1010c0, 0x0)
write$P9_RREMOVE(r2, &(0x7f00000000c0)={0x7, 0x7b, 0x2}, 0x7)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:28 executing program 5 (fault-call:4 fault-nth:0):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:28 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x2200400}, 0x80, 0x0, 0xfffffffffffffee4}, 0x8000)
r2 = fcntl$dupfd(r0, 0x406, r1)
ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000080)=""/143)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)

[ 3037.498386][ T2621] input: syz1 as /devices/virtual/input/input153
05:43:28 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3037.679516][ T2631] input: syz1 as /devices/virtual/input/input154
05:43:29 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x8c00)

05:43:29 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x200000002, 0x10005)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:29 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x885, 0x4)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000180)=ANY=[])
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/10, &(0x7f0000000100)=0xa)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:29 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x2, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:29 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3038.113077][ T2641] input: syz1 as /devices/virtual/input/input155
05:43:29 executing program 4 (fault-call:4 fault-nth:0):
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:29 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x1)
write$binfmt_aout(r0, 0x0, 0xfffffffffffffe88)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000059, 0x8000000044000102, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x4800)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:29 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x21080b, 0x400000006)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00')
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3038.153276][ T2645] input: syz1 as /devices/virtual/input/input156
05:43:29 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:29 executing program 0:
r0 = socket(0x1e, 0x2, 0x40000000000)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:29 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x100000000002, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:29 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x5421, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3038.463969][ T2671] input: syz1 as /devices/virtual/input/input157
05:43:30 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x8c01)

05:43:30 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x40, 0x400)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000001c0)={0x0, 0x1, {0x1d, 0x30, 0x1, 0x1, 0x4, 0x86, 0x4, 0x2e, 0x1}})
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xd8, 0xd8, 0x0, 0x0, 0x0, 0x340, 0x340, 0x340, 0x340, 0x340, 0x4, &(0x7f0000000240), {[{{@uncond, 0x0, 0x98, 0xd8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x79, 0x80000001, 0x936, 0x6, 0x5, 0x4, 0x1, 0x34]}}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x4, 0x8, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x5, 0xc, [0x22, 0x1d, 0x33, 0x1c, 0x3a, 0x34, 0x1, 0x23, 0x9, 0x22, 0x19, 0x19, 0x8, 0x3f, 0x2f, 0x3a], 0x2, 0x8, 0x4}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff, 'veth0_to_team\x00', 'bpq0\x00', {}, {}, 0x2e, 0x3, 0x40}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x2, 0x1, 0x2, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x0, 0x7f}, {0x6, 0x4f95, 0x5}, {0x6, 0x9, 0x2}, 0x8, 0xfff}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x438)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @rand_addr, <r3=>0x0}, &(0x7f00000000c0)=0xc)
sendto$packet(r2, &(0x7f0000000000)="bcc839929b79ecf3f915b2bf0bde", 0xe, 0x8001, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @dev={[], 0xf}}, 0xb)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000200)=@req={0x81, 0x6, 0xffffffff, 0x20000000}, 0xfffffffffffffd63)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:30 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000000a, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:30 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000000040)=0x4, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:30 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x5450, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:30 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x3}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3039.104442][ T2686] input: syz1 as /devices/virtual/input/input159
05:43:30 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:30 executing program 0:
r0 = syz_open_dev$midi(&(0x7f0000000400)='/dev/midi#\x00', 0x1000000004, 0x40200)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x3, 0x40000000000, 0x7, 0x7}, 0x10)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={<r2=>0x0, @in6={{0xa, 0x4e23, 0x5, @remote, 0x2}}, [0x942, 0x7, 0x1, 0x6, 0x5, 0x5, 0x1, 0x100000000, 0x5, 0x7, 0x18, 0x101, 0x100000000, 0x215a, 0xfff]}, &(0x7f0000000300)=0x100)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={r2, 0x200}, &(0x7f0000000380)=0x8)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000000c0)={0x3f, @multicast1, 0x4e21, 0x3, 'wrr\x00', 0x11, 0xffffffffffffffe7, 0x36}, 0x2c)
sync()
r3 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x6, 0xa26, 0x100000000}, 0x7)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x75, 0x0}, 0x0)

05:43:30 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x4}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3039.151454][ T2695] input: syz1 as /devices/virtual/input/input160
05:43:30 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x300}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:30 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0304000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:30 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x807, 0x35a8)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req={0xffff00, 0x2, 0x6, 0x2}, 0xffffffffffffff62)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000180)=""/114, &(0x7f0000000000)=0x72)

05:43:30 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x8d00)

05:43:30 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x5451, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:30 executing program 3:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0)
pread64(r0, &(0x7f00000000c0)=""/103, 0x67, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:30 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "03fa49a646000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:30 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x101d0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:31 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x33, @multicast1, 0x4e24, 0x1, 'wlc\x00', 0x8, 0x1b54, 0x3}, 0x2c)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3040.050172][ T2724] input: syz1 as /devices/virtual/input/input161
05:43:31 executing program 0:
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='^^/-trus}%d\x00')
r0 = socket(0x1e, 0x2, 0x1e)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, r2, 0x810, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffff0001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10000}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x15}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r2, 0x202, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x21}}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xa04a}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004080}, 0x80)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x80, 0x0}, 0x0)

05:43:31 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "030046a649fa0000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:31 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x40000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:31 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
recvmsg$kcm(r0, &(0x7f00000015c0)={&(0x7f0000000080)=@can={0x1d, <r1=>0x0}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000180)=""/210, 0xd2}, {&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000000300)=""/140, 0x8c}, {&(0x7f00000003c0)=""/108, 0x6c}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)}, {&(0x7f0000001480)}], 0x8, &(0x7f0000001540)=""/83, 0x53}, 0x100)
bind$bt_hci(r0, &(0x7f0000001600)={0x1f, r1, 0x1}, 0xc)
r2 = socket(0x1e, 0x2, 0x2000000000)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
openat$ppp(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/ppp\x00', 0x202842, 0x0)
ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000000))
r3 = syz_open_dev$usb(&(0x7f0000001440)='/dev/bus/usb/00#/00#\x00', 0x8, 0x40)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001480)={<r4=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000001680)={0x6, 0x118, 0xfa00, {{0x1, 0x400, "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", 0xe4, 0xfff, 0x5, 0x72d07676, 0x6, 0x40}, r4}}, 0x120)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0xa1}, 0x0)
ioctl$CAPI_GET_PROFILE(r3, 0xc0404309, &(0x7f0000001800)=0x9)

05:43:31 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x5452, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:31 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000904000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3040.322114][ T2754] input: syz1 as /devices/virtual/input/input163
05:43:31 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x8d01)

05:43:31 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000000c0)={{0x3, 0x0, 0xf2, 0x3, 0x100000000}, 0x9, 0x3ff})
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:31 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x1000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:31 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "03000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:31 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x5460, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3041.027508][ T2772] input: syz1 as /devices/virtual/input/input165
05:43:32 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000400000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3041.082615][ T2778] input: syz1 as /devices/virtual/input/input166
05:43:32 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x3000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:32 executing program 0:
r0 = socket(0x40000000000000b, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0xffffffcb}, 0x3)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000140)=0xf000)

05:43:32 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "03000009000101d0000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:32 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @dev}, 0xfffffffffffffd67, &(0x7f0000000640), 0x6, &(0x7f00000006c0)=""/244, 0xf4}, 0x1}], 0x1, 0x44000105, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0xfffffffffffffe69)

05:43:32 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "030000097fffffff000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:32 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3041.375759][ T2806] input: syz1 as /devices/virtual/input/input167
05:43:32 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x8e00)

05:43:32 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
connect$x25(r0, &(0x7f0000000000)={0x9, @remote={[], 0x1}}, 0x12)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:32 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0xd0010100}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:32 executing program 3:
r0 = fcntl$getown(0xffffffffffffff9c, 0x9)
ptrace$setsig(0x4203, r0, 0x81, &(0x7f0000000040)={0xa, 0xa6, 0x4})
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x3}, 0x1c)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:32 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000004000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:32 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044590, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3041.963466][ T2818] input: syz1 as /devices/virtual/input/input169
05:43:33 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000101d00226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:33 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0xffffff7f}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:33 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000000)=0xba73, 0x4)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3042.035714][ T2829] input: syz1 as /devices/virtual/input/input170
05:43:33 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x19b40000000000, 0x8, 0x0, 0xbb31}, 0x10)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:33 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "03000009000000007fffffff0226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:33 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x4000000000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:33 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x8e01)

05:43:33 executing program 0:
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x6, 0x8, 0x6, 0x600000000000000}, 0x10)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x1ff, 0xf9, "15b6b92646e2ab970668784d12bd081468c784fffc3e6967b7fa2030306067d4b2bdd5490ffe1df0b0522d842aff7886524ca08295a44f24bbe79f42b581a380fdb85cfe325e3352c3fa30be7537bd30abcdf0a79b894ecc00fd4449d800ba7013b986f43f60bedbab680e77e7fd9725998b685f9ea3a408fa7e38523b9fc1075756c1dad8cf7fac6d885e080da89978e4bcb8820f6fe55b89830000ab1dee8dc2f44e35de7ad9d67cbb56bce4bc5d1eae0905ef33b0784572e5c41cd47dfee6a7f8f6a3b5dab687f4e23e03a0d9b0734ba202053d9dbdbb43543f0cb4e99d352fb82ee9d109cf72defa68bd97ea80ed0bf94bd297a2940709"})
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:33 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000126cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:33 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044591, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:33 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x100000000000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:33 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3d, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000004}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x1a8, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9aee}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbb}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9167}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xaf45}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x1a8}}, 0x20000800)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

[ 3042.874657][ T2856] Unknown ioctl 1074287107
[ 3042.902549][ T2862] input: syz1 as /devices/virtual/input/input171
[ 3042.922523][ T2856] Unknown ioctl 1074287107
05:43:33 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900040000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:33 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000001740)={0x53, 0xffffffffffffffff, 0x3f, 0x9, @scatter={0x8, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)=""/78, 0x4e}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000200)=""/84, 0x54}, {&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/253, 0xfd}, {&(0x7f0000001440)=""/214, 0xd6}]}, &(0x7f00000015c0)="f75f84432915d0f559e07d5c8c1d2898070265de701e2e5fa8134025b1dfdfca01e8ce38e53f7d591c4e89a67358011f7f9f08772cb81099a89ffba98f1731", &(0x7f0000001600)=""/241, 0xc1b, 0x6, 0x0, &(0x7f0000001700)})
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3042.953003][ T2871] input: syz1 as /devices/virtual/input/input172
05:43:34 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x300000000000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:34 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900d00101000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:34 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x40000000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x117000, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:34 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x400445a0, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3043.206734][ T2889] input: syz1 as /devices/virtual/input/input173
[ 3043.229970][ T2890] input: syz1 as /devices/virtual/input/input174
05:43:34 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x8f00)

05:43:34 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000080))

05:43:34 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0xd001010000000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:34 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000004000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:34 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80b00, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000100)={0x7, <r2=>0x0, 0x10003, 0xfe})
ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000140)={r2, 0x200})

05:43:34 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40049409, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3043.857376][ T2904] input: syz1 as /devices/virtual/input/input175
[ 3043.896791][ T2911] input: syz1 as /devices/virtual/input/input176
05:43:34 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000101d00000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:34 executing program 0:
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2)
write$capi20(r0, &(0x7f0000000080)={0x10, 0x4, 0x0, 0x83, 0x5, 0x4}, 0x10)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:34 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0xffffff7f00000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:35 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4)

05:43:35 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "03000009007fffffff0000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:35 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40084503, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3044.211836][ T2934] input: syz1 as /devices/virtual/input/input177
[ 3044.261320][ T2934] input: syz1 as /devices/virtual/input/input178
05:43:35 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x8f01)

05:43:35 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x3}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:35 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000, 0x0)
ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000080))

05:43:35 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000400000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:35 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x4, 0x7fffd)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:35 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40084504, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3044.807817][ T2947] input: syz1 as /devices/virtual/input/input179
05:43:35 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "030000090000d001010000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:35 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x14)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0))
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:35 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={<r1=>0x0, 0x293, 0x10}, &(0x7f0000000080)=0xc)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r1, 0x6, 0x30, 0x6c, 0x726f}, &(0x7f0000000100)=0x18)
r2 = socket(0x1e, 0x805, 0x0)
r3 = dup2(r2, r2)
ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000340)={0x297627cd, 0x3, 0x9, 0x9e, &(0x7f0000000140)=""/158, 0x67, &(0x7f0000000200)=""/103, 0x90, &(0x7f0000000280)=""/144})
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)

05:43:35 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:35 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000040000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:35 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40104593, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3045.083943][ T2972] input: syz1 as /devices/virtual/input/input181
05:43:36 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9000)

05:43:36 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
memfd_create(&(0x7f00000000c0)=',tru\x00\x00ed\f+\x7fwlan0*\x00', 0x2)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4040, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={<r3=>0x0, 0x1000, 0x10}, &(0x7f0000000400)=0xc)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000440)={r3, @in={{0x2, 0x4e23, @loopback}}, 0x2, 0x1000, 0x800, 0x5, 0xbfbc}, &(0x7f0000000500)=0x98)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, <r4=>0x0}, &(0x7f0000000100)=0xc)
getgroups(0x1, &(0x7f0000000180)=[<r5=>0xffffffffffffffff])
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8)
write$P9_RSTATu(r2, &(0x7f0000000300)={0x9c, 0x7d, 0x2, {{0x0, 0x75, 0x4, 0x3ff, {0x20, 0x0, 0x8}, 0x40000, 0x4, 0x10001, 0x8, 0x1e, 'ppp1keyringcpuset)cgroupppp1,-', 0x0, '', 0x12, ',tru\x00\x00ed\f+\x7fwlan0*\x00', 0x12, ',tru\x00\x00ed\f+\x7fwlan0*\x00'}, 0x12, ',tru\x00\x00ed\f+\x7fwlan0*\x00', r4, r5, r6}}, 0x9c)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:36 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x300}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:36 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "030000090000000101d000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:36 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e20, 0x58, @empty, 0x4}, {0xa, 0x4e20, 0x401, @ipv4={[], [], @broadcast}, 0x2}, 0x1, [0x4, 0x8, 0x3, 0xffffffff, 0x8, 0x5517, 0x99, 0x1]}, 0x5c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:36 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x4020940d, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3045.792488][ T2988] input: syz1 as /devices/virtual/input/input183
05:43:36 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x101d0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:36 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x23a}, 0x0)

05:43:36 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900007fffffff00000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3045.841651][ T2997] input: syz1 as /devices/virtual/input/input184
05:43:37 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x40000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:37 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
open(&(0x7f0000000000)='./file0\x00', 0x448000, 0x30)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:37 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40284504, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3046.105123][ T3016] input: syz1 as /devices/virtual/input/input185
05:43:37 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9001)

05:43:37 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000004000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:37 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x22080, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0x48)

05:43:37 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x9, 0x401, 0x8000, 0x6d13}, 0x101e6)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000440)='/dev/video1\x00', 0x2, 0x0)
syz_mount_image$nfs(&(0x7f00000000c0)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000180)="ca2b70eef7af894ead292f819ce2455b25294e02ad3ad69ff908bb17f5c03d04ffe6db275c840c86dc65502d752f2dc3123bd33b5fb4b4e426786e2b961b25fe599cd1875a533968a8f0c75b29dedabaac5a89fc2040c9e1d09de09213b891928e7ac76be5501206af7608f66e", 0x6d, 0x3}, {&(0x7f0000000200)="d744df82fc88cb6f459adfda531c6ca280e5f570b3152298f99fd729108869920455504733dffcdd5c82b8d2d14d1bc8c5bf5283516ec1bb21f4b65e8e630443701401c4d9b0414b95f4107d7a74de0cc46d03918744d230d50a6b62ea9abbe574706389c42f1fa5c1706bf1f42b45cb096efd86dab0d1055b65a22298dc18af17c3e6c1e8bb6ed1719e61ce76af98608fb6af40c9ecc33ce18f380498898f289041ffd168d003cc257a6c28a4e6390f71cca61213ef53362ff5a37b46a326eb2e8df73d83ce7fb1664c7c", 0xcb}, {&(0x7f0000000300)="66b3a45e23d287b4ffbd3751b7b82698ea3093fe93dd77c051642e9b73db974cefa5115e56b1e00cf4b3", 0x2a, 0x50f3}], 0x4, &(0x7f00000003c0)=':\x00')
r1 = socket(0x9, 0x806, 0x0)
ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, [@bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
lgetxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="6f73782e62646576637075736574245e70707030003db89846592a2004624c301c2c9314cd1fd01e3c955e17b36f7d28b0f09ce9bab0d4e944ab40d62a4d865e18545594c4898e6a975df3e8b914"], &(0x7f0000000480)=""/31, 0x1f)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000080)={0x9, 0xff, 0x80000000, 0x3, 0x8, 0x9})
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000004c0)=@req={0x8000, 0x0, 0x1000, 0x75b}, 0x10)

05:43:37 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x1000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:37 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044501, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3046.754468][ T3031] input: syz1 as /devices/virtual/input/input187
05:43:37 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "03000009000000d0010100000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3046.799710][ T3039] input: syz1 as /devices/virtual/input/input188
05:43:37 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x3000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:37 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
ioctl$void(r0, 0xc0045878)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0x6, 0x0, 0x7f, 0x3}, 0xffffffffffffff54)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'nlmon0\x00', {0x2, 0x4e24, @multicast1}})
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x240000, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000100))
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:37 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000400000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:37 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x20, 0xf3, 0x80, 0x0, 0x2, 0x100, 0xe, 0x9, 0xffffffffffffffe0, 0x8, 0x8, 0x1, 0x7ff, 0x6, 0x74e6, 0x1, 0x400, 0x100000001, 0x6b, 0x7ff, 0x0, 0x7, 0xff, 0x34d24757, 0x4, 0x6, 0x2, 0x81, 0x5, 0x1, 0x3d, 0x4, 0x1, 0x8001, 0x7, 0x0, 0x10000, 0x0, @perf_config_ext={0x8000, 0x8001}, 0x40, 0xc000, 0x9, 0x5, 0x3e, 0x7, 0x1}, 0xffffffffffffffff, 0x6, r0, 0x9)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:37 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0xd0010100}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:38 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9100)

05:43:38 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:38 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz'}, 0xfffffffffffffffe, 0xfffffffffffffffb)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r1, 0x6)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f0000000080)="ef", 0x1)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @rand_addr=0xb9}, 0x3f0)
r3 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r4 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r3, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:38 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "03000009000000000101d0000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:38 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:38 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r2 = dup3(r0, r0, 0x80000)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x4b8, 0x0, 0x160, 0x160, 0x3d0, 0x3d0, 0x3d0, 0x4, &(0x7f0000000140), {[{{@arp={@multicast2, @remote, 0xffffffff, 0xffffffff, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}, @mac=@dev={[], 0x1e}, {[0x0, 0x0, 0x0, 0x0, 0xff]}, 0x1f, 0x2, 0x6, 0x8001, 0x1, 0x29f, 'ifb0\x00', 'team_slave_1\x00', {}, {0xff}, 0x0, 0x1c0}, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x3, 0x8, 0x1, 0x0, 0x0, "b4c2c7e108009e57767f424c548e7a0169ed3958d9ed341900fbe360d4dcdb3349e7a24e6229da5507fb6d1f047127e324061551a46ae6719f37799071e6c64d"}}}, {{@uncond, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x80, 0x754000000, 0x9}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={[], 0x12}, @dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x3, 0xf, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x508)
r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400a00, 0x0)
ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000001c0)=""/251)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c)
ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f00000000c0)={0xe21, "b2fe79fd14da6bbef8133c6c16ab2df7a4712f29a28a7c55792a09d17c64797b", 0x1, 0x1f, 0x8000, 0xff17ff, 0x2})
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20, 0xfffffffffffffff5, 0x1, {0xe065, 0x4, 0x0, 0x100000000}}, 0x20)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

[ 3047.681985][ T3080] input: syz1 as /devices/virtual/input/input189
[ 3047.718324][ T3087] input: syz1 as /devices/virtual/input/input190
05:43:38 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
sendto(r0, &(0x7f0000000000)="5688632291e6a64b936c5b8432a86eba07cb9caf03fdc428980e417f0c0bb423288dd2daad", 0x25, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x4b8, 0x2a0, 0x0, 0x2a0, 0x3d0, 0x3d0, 0x3d0, 0x4, &(0x7f0000000080), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @broadcast, 0x1}}}, {{@arp={@local, @multicast1, 0xff000000, 0xffffffff, @mac, {[0x0, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff]}, 0x3, 0x5, 0x83, 0xe00000000, 0x80, 0x4, 'veth1_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x0, 0x40}, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x100000000, 0x2, 0x0, 0x0, "9766a11e21c514f46664a4d8f7f374df896ce2657a62f998fbbed8b57edb026a6d3b0db5cf7055badb5417d824e6de069af8bd9fd6b71e3c0c38d263d8ebf865"}}}, {{@uncond, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x80000001, 0x40}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x508)

05:43:38 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:38 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "030000090000007fffffff000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:38 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
write$P9_RSYMLINK(r2, &(0x7f0000000080)={0x14, 0x11, 0x1, {0x0, 0x2, 0x8}}, 0x14)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
connect$rds(r3, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x4a98}, 0x10)

05:43:38 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000040000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:38 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000d00101000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:39 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9101)

05:43:39 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80084502, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:39 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:39 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x80002, 0x4000000)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:39 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000004000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:39 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
r1 = syz_open_dev$usb(&(0x7f0000000380)='/dev/bus/usb/00#/00#\x00', 0x7, 0x400)
sendmsg$nl_generic(r1, &(0x7f0000002a40)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002a00)={&(0x7f0000002780)={0x24c, 0x20, 0x100, 0x70bd25, 0x25dfdbfe, {0x16}, [@typed={0x8, 0x1b, @fd=r0}, @nested={0x18, 0x3, [@typed={0x14, 0x1c, @ipv6=@empty}]}, @typed={0xc, 0x9, @u64=0x8}, @nested={0x18, 0x79, [@typed={0xc, 0x2, @u64=0x1f}, @typed={0x8, 0x22, @ipv4=@remote}]}, @generic="c769146a2dc95a84056e4648bd527d738efc06eb93f72ff867bfc56faa4657286419bc024957ccb547f75e54b6ef889dea2775fe95c168942b2e46ff180bba4a73b8b6a2e4de319b6c6b904e2df0f35cd89b60e80007c517f29f2978861261678d327143187149f2c6b9399d65ca7f7b28290c6ffdfb2020cbcda3ab640058d9727a9c4b2bcb51f276a8198abc039bc190652aaf88700a03da82641b693cd82f3a4132e5d8b5bb6c3aeb382c1812cd759de28fed7451", @generic="aa0f267621ff0625a4c42bd0693fdfc720112c45e2107a55b4e7545247665939591d6daa834ff402ed203c6410b7403d335f8537de14e28d6c7d1e32a2785fc18373497da2d8dbfaa1841792fed75bf84cf1c4e1b06e1b63fc1d8b814c8885e6c8ebe4e6581b1a8d82818cec0d83262145b3622f0077ccd9f98f09ed813702370b45fed0bee7548c843f9d23affd1455e32a88bb539efa5ed123f5d683ea8f5d0d1424bbec2f19c79a87fe3931f4e8448c700b91e954ce1d4b213b382d1a85f931acf8442ebcc8c38ce9bb24d492f5eb8acb1468df894fccd0504ae0a919588aff2491c0f5a4eebf67a3a2b2a7bd6b3201444b", @generic="6580457a1418a7711ad5e1b68ddd161df24b6922e433d34233ece3343332ce687859c1c314dfdf9d195edc9175f0f16211c797d1dc6d5be1ec55704a68fee30ace6006bdd55979d424371d"]}, 0x24c}, 0x1, 0x0, 0x0, 0x40000}, 0x884)
recvmmsg(r0, &(0x7f0000002680)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f00000001c0)=""/137, 0x89}, {&(0x7f0000000140)=""/53, 0x35}, {&(0x7f0000000280)=""/83, 0x53}], 0x4, &(0x7f0000000380)}, 0x4}, {{&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000440)=""/11, 0xb}], 0x1, &(0x7f00000004c0)=""/207, 0xcf}, 0x1}, {{&(0x7f00000005c0)=@can, 0x80, &(0x7f0000001640)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1, &(0x7f0000001680)=""/4096, 0x1000}, 0x1}], 0x3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x3aa, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

[ 3048.641827][ T3128] input: syz1 as /devices/virtual/input/input191
[ 3048.696668][ T3141] input: syz1 as /devices/virtual/input/input192
05:43:39 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001500)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000001600)=0xe8)
sendmsg$nl_route(r0, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44}, 0xc, &(0x7f0000001680)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001c0010002bbd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="b000000a080006004e2000007d974b7122824c262e9c440e9b5f4b887de1fcaebb081f5a5426bdc42f8e4d858865d62d70dafcc909d4b328dabab485dbe6b45ab3129669736b62f50661eca8f76817e4753c067af465afac46d790d846bf76c1bf0455b35e61bdb94d8b8d9cef6c8cbaf19feadbd17402530e43d6b34a38b5b2afbb1aa37888a074c97f75cf86bf481c983227672a0eff85eaf4ac75da67b89dc5d5274ab4b103714318bd539182a51fb110a57a2b0815f85e3c80ed17d0343a5c6b2ed5a159484510a47c62ddbb358037909154b1183fe18798a10cd7b26a1b0e84bb2214c1cfec94ab5ce1c0ddc135275fcb669d8e33494d"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:39 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000101d00226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:39 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:39 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80084503, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:39 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0xcbd6)

05:43:39 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0xd001010000000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3048.948503][ T3158] input: syz1 as /devices/virtual/input/input193
05:43:40 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9200)

05:43:40 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "03000009000000007fffffff0226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:40 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
linkat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x400)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000180)={0x1, 0x0, @pic={0x8, 0xff, 0x9, 0x6, 0x0, 0x80000001, 0x3, 0x2, 0x0, 0x211, 0x80000000, 0x49a8824c, 0x1ff, 0xfffffffffffffffd, 0xd2, 0x1}})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000280)={{0x401, 0x100000000}, {0x7, 0x74e1}, 0x80, 0x6, 0x40})

05:43:40 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:40 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80084504, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:40 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x870, 0x200)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x1, 0x4)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xdedf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x2, 0x0)
r2 = socket$inet6(0xa, 0x807, 0x1)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0)=ANY=[], &(0x7f0000000200))
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0x1}, 0x1c)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

[ 3049.579968][ T3181] input: syz1 as /devices/virtual/input/input195
05:43:40 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000126cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3049.642322][ T3194] input: syz1 as /devices/virtual/input/input196
05:43:40 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1)
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000080))
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:40 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:40 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000400000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:40 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80104592, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:40 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3049.863987][ T3220] input: syz1 as /devices/virtual/input/input197
[ 3049.885362][ T3221] input: syz1 as /devices/virtual/input/input198
05:43:41 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9201)

05:43:41 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x9, 0xcab, 0x8, 0xae7}, 0x10)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x140, 0x0)
write$sndseq(r2, &(0x7f00000000c0)=[{0x80, 0x90, 0x1ff, 0xafd3, @time={0x0, 0x989680}, {0x5}, {0xa007, 0x1}, @addr={0x2, 0xffffffff}}], 0x30)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x1db}, 0x0)

05:43:41 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000004000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:41 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80284504, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:41 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x200000000, @ipv4={[], [], @multicast2}}, 0x4b2448a5b45a84c3)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:41 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080400003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3050.567884][ T3242] input: syz1 as /devices/virtual/input/input199
05:43:41 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
socket(0x1, 0x805, 0x81)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x1c)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0))
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)={0x4, [0x1000, 0x0, 0x3, 0x7]}, &(0x7f0000000180)=0xc)
ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f00000000c0))

05:43:41 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={<r1=>0x0, 0xc000000000000000, 0x8, [0x5, 0x400, 0xa04, 0x5, 0x2, 0x3, 0x6, 0x0]}, &(0x7f0000000180)=0x18)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x4800000000000000, 0x10001, 0x2, 0xf3, 0x0, 0xfff, 0x200, 0x36, r1}, &(0x7f0000000200)=0x20)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)=0x2)
r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x6c, 0x100)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r0, r2})
socket$alg(0x26, 0x5, 0x0)
r3 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:41 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0xc0045878, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:41 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080004003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:41 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:41 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil)
shmctl$SHM_STAT(r1, 0xd, &(0x7f00000000c0)=""/55)
getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3050.861332][ T3272] input: syz1 as /devices/virtual/input/input201
[ 3050.909553][ T3279] input: syz1 as /devices/virtual/input/input202
05:43:42 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9300)

05:43:42 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c70214dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:42 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)=<r1=>0x0)
r2 = gettid()
sendmsg$netlink(r0, &(0x7f0000000d80)={&(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x220400}, 0xc, &(0x7f0000000d40)=[{&(0x7f0000000600)={0x304, 0x3b, 0xf20, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x2c, 0x3c, [@typed={0x8, 0x3d, @ipv4=@empty}, @generic="f7c7821ed48d8a1771b026db9360b8ed58594e22179fa771ad5e7dad9a08150b"]}, @typed={0x8, 0x5e, @u32=0x7bbff16f}, @nested={0xe0, 0x8c, [@typed={0x8, 0x35, @pid=r2}, @typed={0xc0, 0x73, @binary="90e4c3c0708695fe4174b10d0bb233e6b90fc349ce3b7fbcca166219306e9d399bc26299c7d29ddff2bc3f80e9807985e42fb8a50286d1b101f8914387893befa654142dd1dfd96c200358cfd4b8d0691a477607b8cad7bdf939ae936fa05c53a2518fdba7405b7156a86993b9d8eda6a0644de23f701953205d06e64c649cf6e7c8db155d56b5f7d0b87a05583a480d3b747b091e201b2510c588b6f26c0eb4ddd39c905ec7d94f1851f6556c84383cbdfc2f5e6be6b8fce2"}, @generic="916b31e33f801c0bccbe9c", @typed={0x8, 0x77, @uid=r1}]}, @generic="d90628c7e52c53d6c071764ac601fc1a47f49b6f30419fff33575a154bd3ae5f9f2b24f24b73584c1aa68c3404367ebd1ab38531f02d0ba093488f96174e5290580384774ccaa7c69d5c46987d1bcd55c2c697b3ef6d6645103bf974c0339231ebe7cfd1c49c0750c8c7f3c63fbf4609f415eafcc29eb4ff1892ea9ba79cfc7d822038dfaf4894c80123", @nested={0xc0, 0x23, [@typed={0xc, 0x84, @u64=0x6}, @typed={0xc, 0x56, @u64=0x6}, @typed={0xa4, 0x56, @binary="f51f982e79c71eb87f84302e057f9483ed073f32cbc30481adfb8aace4d1f79ba545af88218d77e3ec99179a4dca13a9ce92eac96aa59f9ecb89b822cdd71d877c65730c516c735f6ad85d3c399f77f1057193156c6ce10b84b4a2bea7a0defb1551ec7e97288869874e2571f5a93d770bb49ec88e51cf5767ad43c6d8fd6fbecbcc67c765ee6c167302a74890d47c4ef1c63c301f645d702c22b28cfd"}]}, @typed={0x8, 0x29, @u32=0xb2}, @nested={0x80, 0x81, [@generic="a553a22eb8834453a80db1fe64e2e477add122cf5f680c83138161ad91bd5447fbe8dd53f30611f8cb54459483a2a205c0cfb350c20ab1bfbc378c4322513f9a73dd05f241920e89e1eca82cc66c299c1a8c9b74ad5b4ba7f7249f8789fed93765ed084fb63a838ddc3fa735393f537254ee47963f64c9ced35543"]}, @typed={0xc, 0x8f, @u64=0x9e4}]}, 0x304}, {&(0x7f0000000940)={0x18, 0x16, 0x0, 0x70bd2b, 0x25dfdbff, "", [@typed={0x8, 0x8, @u32=0x2}]}, 0x18}, {&(0x7f0000000980)={0x38c, 0x3e, 0x10, 0x70bd26, 0x25dfdbfc, "", [@typed={0xa8, 0x4, @binary="e59c1f4baa3d6398f408dee0d4ec49b34167e2cacca14898419fb3e0b527368f72e99cb4e069d4565533d75efce4223287a76436415e062e3ea22b6f8277c03c68391eb1f9658797f8ad773983f2a342805a6fc15bd4be63073501e9e8b341ba437384553c9ca68c0950e02aa1076167a445b2889c039ecce86bcb7b6b412e05274210aad9cec730044fd01dc6db5aa91dc59173861b07595f30a7d062e889e24eb8"}, @generic="21675a3814989a285ec5c4d95d023bbce5bded261487d2e7b831d91692a716406742ad88699556d615c7c83e73b1d2230d3af8bb415efb6c35b2325f7b461586d9dcfad13aeee7d90afc079e921b73c69803110b6c4ef3eff1e50615189ef1469017e158e4c512c9cc107f36fa098b2cb5c2183ab2af7fbecf029b9fc0fe0b53352996", @nested={0x104, 0x5c, [@typed={0x8, 0x2e, @fd=r0}, @generic="9a4f0c53a357d209d5873200ecd06986789959820e6992aa4a85aba311c0e944224e0cc91458a62dd548ebf5c71c10df8449f44dfe6e008ef00e01aaa6475b04955cc8f6db451050cb4d4daff2181351d487aa1d2eec4f29dd950c2464c2c437fd11cca36b526f4dede2d34ad623b83d3311c232eb4059f49e5b65d7349b3ccab71aef10c49ed16619ed80b06e0144cc4dc3edf2bd388be23411686f8e3b02d017f5ad3460ff4ce22df580b16ec123f9c89edf10e35a2e203c5168f58ada5a6bfdd63fc5897f89eef7ca756830aa6f4833643a4eb56fe85171302557ec8aca51654519941829e657926527498daa7f", @typed={0x8, 0x7a, @uid=r1}, @generic]}, @typed={0xc, 0x24, @u64=0x1}, @nested={0x140, 0x2d, [@generic="da0d0cfa734e2297e503c0720286b229657f905a732bac0419d86a5cf0e8cd8929a11cfdac83c820fed4b6d2c555c1c86cfe8ec979e2abfa930955e2734ff2f7bdd027b3547c8bf238", @typed={0x14, 0x63, @ipv6=@dev={0xfe, 0x80, [], 0x14}}, @typed={0x8, 0x45, @u32=0x1}, @generic="91cc62447e8606df9503e0106aa28c13636bbad1e568ecf29d066c0f5e6dc6c085688f31042e2e4be8e52095a96834506859ab12d5c5e29af8a472b149cb63314bb56734d4eb91534f9f33c9ff12fbab476db0037f9c5c21628385dadb7b7bb6f71d70bb0787fb6db35209c516183da15222a298f161937e3fdcde71063e56cdd8afc00325c05301869a7f8eb86f2909291d958850a9dd67237471d4db1069ce178caa5e5c5ba3d91d7aa9492b2312b9838b3d3861a8234f92f513ecaa0f6d0e94f3ae9b62e547ce4fe8dabe400f83", @typed={0x8, 0x4e, @fd=r0}]}]}, 0x38c}], 0x3, 0x0, 0x0, 0x800}, 0x804)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @initdev}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8)
r4 = getuid()
fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = getegid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, <r9=>0x0}, &(0x7f0000000500)=0xc)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x1}, [{0x2, 0x3, r1}, {0x2, 0x4, r3}, {0x2, 0x5, r4}, {0x2, 0x2, r5}], {0x4, 0x7}, [{0x8, 0x4, r6}, {0x8, 0x1, r7}, {0x8, 0x7, r8}, {0x8, 0x2, r9}], {0x10, 0x4}, {0x20, 0x1}}, 0x64, 0x2)
r10 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:42 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0xc0045878, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3051.485246][ T3290] input: syz1 as /devices/virtual/input/input203
05:43:42 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c70a14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:42 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x79e5, 0x3f, 0x4, 0x5f}, 0xfc78)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
accept4$nfc_llcp(r0, &(0x7f0000000080), &(0x7f0000000000)=0x60, 0x80800)

05:43:42 executing program 3:
r0 = socket$inet(0x2b, 0x5, 0x28d)
r1 = accept4(r0, 0x0, &(0x7f0000000740)=0xfffffffffffffd25, 0x7fc)
syz_mount_image$btrfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
semget$private(0x0, 0x3, 0x200)
semctl$GETNCNT(0x0, 0x0, 0xe, 0x0)
syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000380), &(0x7f0000000480)=0x4)
lsetxattr$system_posix_acl(0x0, &(0x7f00000005c0)='sys\xffem.posix_a\x1a\xa9,\xb5\x82P\xe2\xe2cl_default\x00\a\xe2D\x95\xf7y\xb3\xa3\x8f\x9ek\x86/\'76\xe79@uJ\x85H\x16v\xf3\xd3\xe4]\xa1\x86\xbd\x89W\x9bA\xdf\xce\xc3\x18\xaa\xd8ZO\xb9\x17\x85_\xbck\x9f\x82\xd1\x95\x8ayv\xb3\x13\xaa\x02W\xf9dU\xd4\xe6\xc0\x12\x86\xcbW\xaa\xa6o\x066\xd9\a\xc5#H', 0x0, 0x0, 0x100000000000)
perf_event_open(&(0x7f0000005240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semget$private(0x0, 0x0, 0x1)
mount$overlay(0x404005, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lower=./file0,workdir=./file1\\\x00\x00\x00\x00'])
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, 0x0, 0x2c)
ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @null, @bpq0='bpq0\x00', 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]})
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x200000, 0x101)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0xa}}, 0x20)
ioctl$void(r0, 0x5451)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000400))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
write$P9_RWALK(r2, &(0x7f00000006c0)={0x4a, 0x6f, 0x1, {0x5, [{0x0, 0x4, 0x6}, {0x40, 0x4, 0x4}, {0x24, 0x1, 0x4}, {0x2, 0x4}, {0x20, 0x3, 0x4}]}}, 0x4a)
mkdir(&(0x7f00000001c0)='./file1\x00', 0x80000)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="c3ef5bba54000400fdff430c0100"], &(0x7f0000000440)=0x12)
r3 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ustat(0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000680)={'veth1_to_bond\x00', &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYPTR64, @ANYPTR64, @ANYRES32=r3, @ANYRESOCT=0x0], @ANYRES16=r0]})
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000000, 0x111080)
ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 3051.531751][ T3302] input: syz1 as /devices/virtual/input/input204
05:43:42 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400000, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:42 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0400e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:42 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x101d0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:42 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0xc0189436, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3051.751890][ T3323] overlayfs: unrecognized mount option "lower=./file0" or missing value
[ 3051.806003][ T3332] input: syz1 as /devices/virtual/input/input205
[ 3051.841655][ T3340] input: syz1 as /devices/virtual/input/input206
05:43:42 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e102000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3051.887307][ T3342] overlayfs: unrecognized mount option "lower=./file0" or missing value
05:43:43 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9301)

05:43:43 executing program 0:
fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000100)={0x0, <r0=>0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x20000, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x7fff, 0x9, 0x610b, 0xd1c, 0x4, 0x56e3, 0xffffffffffffffe1, 0x4, 0x800000000000, 0x3, 0x0, 0x4, 0x5, 0x1f, 0x5b, 0x8001, 0x0, 0x7af1, 0xfffffffffffffffa, 0x8, 0x2, 0x1, 0x8, 0x2, 0x1, 0x4, 0xfffffffffffffff8, 0x400, 0x0, 0x3, 0x2, @perf_config_ext={0x3ff, 0x8}, 0x20000, 0x1f1e, 0xfff, 0x7, 0x3, 0x1, 0x1f}, r0, 0xa, r1, 0x9)
r2 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000}, 0x1c)
sendmsg(r2, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r3, 0xf, 0x1}, 0x14)
membarrier(0x18, 0x0)
ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000000))

05:43:43 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:43 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:43 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103040000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:43 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0xc020660b, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:43 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000400f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3052.477615][ T3358] input: syz1 as /devices/virtual/input/input207
[ 3052.506378][ T3364] input: syz1 as /devices/virtual/input/input208
05:43:43 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x9, 0x5, 0x9, 0x7}, 0x10)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:43 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8040004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:43 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x420000, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={<r1=>0x0, 0x9}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e22, @multicast2}}, 0x80000000, 0xfff}, &(0x7f0000000280)=0x90)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x204800, 0x20)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)=<r4=>0x0)
getpgrp(r4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:43 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2002, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x7, 0x0, 0x6, 0x1}, 'syz0\x00', 0x4d})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x8010, r2, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x20, 0x0, 0x0, {0x3, 0xffffffffffffffff}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:43 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f020039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3052.777584][ T3384] input: syz1 as /devices/virtual/input/input209
[ 3052.802661][ T3385] input: syz1 as /devices/virtual/input/input210
05:43:44 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9400)

05:43:44 executing program 0:
r0 = msgget$private(0x0, 0x100)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000180)=""/136)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000080)=0x4)

05:43:44 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f000339d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:44 executing program 3:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x18300, 0x0)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1808}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x210, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x2, 0x7f, 0x4d67}, {0xda, 0x100000000, 0x0, 0x66c}]}, 0x10)
ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x9a)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:44 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000040))

05:43:44 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:44 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff02000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:44 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000}, 0x1c)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3053.421732][ T3401] input: syz1 as /devices/virtual/input/input211
[ 3053.450545][ T3401] input: syz1 as /devices/virtual/input/input212
05:43:44 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff00030300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:44 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000080))
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x1000, 0x4, 0xffffffffffffffff})
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:44 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000200110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:44 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x2, 0x5c6, 0x54a6}, 0x10)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
sysfs$3(0x3)

[ 3053.685090][ T3424] input: syz1 as /devices/virtual/input/input213
[ 3053.720488][ T3426] input: syz1 as /devices/virtual/input/input214
05:43:45 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9401)

05:43:45 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x1b3)

05:43:45 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50704000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:45 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280)={<r1=>0x0, 0xfffffffffffffffe}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={<r2=>r1, 0x9}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x6, 0x2c}, &(0x7f0000000200)=0xc)
r3 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000080)="8a944fe119682d5ecafb76efc54fc9ae04226d1647ed3c3f9f006376299740c7f8ab52429e6e63f74a7e4344d11d00c27c603b2d5b95dc282d46f90191fdd197606aff59d2adb927c76d1e2bffb525de74a83e63a6ee9de2a0c508b7406bdda50f518a3f219747a7477c77b7907febaca7417fdd50c4aedb8cb2d349caaf502a4ad39cc369dbbed0ce6b9498b6e80d84a6bb3ff3", 0x94)

05:43:45 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x1f2, 0x5}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8e|\x00', 0xffffffffffffffff})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000140)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000280)=0xc)
fchown(r1, r2, r3)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:45 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3054.382151][ T3442] input input215: cannot allocate more than FF_MAX_EFFECTS effects
05:43:45 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d507d0010100000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:45 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = getuid()
r2 = getgid()
r3 = getuid()
syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000180)="ad110ff356a9a37af7f4fdec19bee03a25d051c706243a6a92cd1282ce65ade4e0e36082d4b447c9bf328c7168f9d35b70dfe7ceb9cb786ade6d09e911e8b11c13aa0d5b9ee0495cf3a39d579a3f74d42199fe134ddd5f73ea0bd33888f19b42de9b3f73ff1b0a29cd0980cecbda2f6646a3a5ec6fe57f0a92945689823cd6d1deb24aad6adac68ca0f2739a05b230055dc4f3b42eab53a9860872f327474ccecd9ca38fe6b0290e40f4b5f2203b6180bb743d7abc6c270446128d67339cfde098c4735060b493595481ab0c53074a", 0xcf, 0x80}], 0x800000, &(0x7f0000000280)={[{@nls={'nls', 0x3d, 'iso8859-7'}}, {@errors_continue='errors=continue'}, {@uid={'uid', 0x3d, r1}}, {@disable_sparse_yes='disable_sparse=yes'}, {@gid={'gid', 0x3d, r2}}], [{@uid_lt={'uid<', r3}}, {@obj_type={'obj_type', 0x3d, 'vmnet1/@'}}, {@subj_user={'subj_user'}}, {@subj_user={'subj_user'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@hash='hash'}]})
accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000340)=0x14, 0x800)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', r4})
r5 = socket(0x3, 0x7, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r6 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000340)=0x1000)
r7 = socket$vsock_dgram(0x28, 0x2, 0x0)
ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19c, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_config_ext, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r8, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb)
syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00')
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="473af011bc43b0f00a6b35330bfc1706f74500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000d80)=0x1c)
r9 = dup2(r8, r8)
sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfffffffd}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="4500b091e5fb02a45fcbf9c9c86a32e1286ec7ad5269a445251954d4895f2b460900006602899f17bf3243d03db2717aeb5719ee70dd179bc6dd3954c3031659eab8d6efefa19fbc9994b538b6dfbd9a444a0ae36b231be666702002f91846b4c756915faf2b7b097d23b2529aa0f02f2a2dba77fb970044de7191c085dc05cf52d7335bf8410d79557dc5b3261599c74301d2"], 0x1}}, 0x44801)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000380), 0xfdf5)
sendto$inet(r8, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x10000200000, 0x0)

05:43:45 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x3}, 'syz1\x00', 0x200000003})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x80)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:45 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @rand_addr, 0x37}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
r1 = shmget(0x1, 0x1000, 0x10000110, &(0x7f0000fff000/0x1000)=nil)
shmctl$SHM_LOCK(r1, 0xb)

[ 3054.649735][ T3466] input: syz1 as /devices/virtual/input/input217
[ 3054.684935][ T3467] input: syz1 as /devices/virtual/input/input218
05:43:45 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000400000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:45 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d507000101d0000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:46 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9500)

05:43:46 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
socket$inet6(0xa, 0x0, 0xeb7)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {0xfffffffffffffffd}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:46 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d5077fffffff000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:46 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r1 = msgget(0x0, 0xa)
msgctl$IPC_RMID(r1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:46 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)=0x3)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:46 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd0010100}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3055.388850][ T3488] input: syz1 as /devices/virtual/input/input219
05:43:46 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700040000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:46 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x80, 0x2, 0x80000001, 0x80000001, <r2=>0x0}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x6}, 0x8)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3055.431797][ T3488] input: syz1 as /devices/virtual/input/input220
05:43:46 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={<r2=>0x0}, &(0x7f00000000c0)=0xc)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2802, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
fcntl$setown(r0, 0x8, r2)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100))
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:46 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700d00101000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:46 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:46 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2)
ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000040))
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

[ 3055.744827][ T3517] input: syz1 as /devices/virtual/input/input221
[ 3055.757959][ T3518] input: syz1 as /devices/virtual/input/input222
05:43:47 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9501)

05:43:47 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000004000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:47 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@ax25={{0x3, @null, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="c36295087fe06e637b74f9cf5fbb22aee96f6638e7c0524ac474f3d019a43d6adbb05e4704435691edbddf607c8005ef02719fd43086906549ee1db912937fe6232b9a1d1761b3f0975e6be69136d2e60d4cde8efbb51e38ec322c8ade39ba4d341c5cbd2bd8cafd1bf2a20e482084ce543a270cf071dc159f22c512212a98b3d24aaadc9dc3a04c76cb62407bf4f70fe584386022a69ddb79380b3f8948fdea8c86b7fd85d1f8b76332f13636ffcb77b89113586103b62a908c9382a3020a05ea4f1f2369e114dcf13527", 0xcb}], 0x1}, 0x800)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket(0x5, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:47 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x8000)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/90)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:47 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x79ce14ecf8201453, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x17, 0xe000000000000000, 0x8, 0x1, 0x30, r2, 0x7}, 0x2c)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x121000, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000140)={{0xd48, 0x4, 0x1d9d, 0x3f, 0x7}, 0x7f, 0x9, 0x8, 0x8001, 0x3ff, "8fae0939992abed5390872b2bc5a39a16514bb15f580c2bfa1e6baaecede83f5f6af35a09ec7b2976c58eac4f6e394143867025074bc68f0e0c62f8f2cc87d81b3e5a854bee2e6244190652a2275b4ec53b24f26cb1c667f546be424433ae398836613b463caa9886e54733ad3c822f11c76ae59026816161a201b9f7123f771"})
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:47 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3056.348797][ T3531] input: syz1 as /devices/virtual/input/input223
05:43:47 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000101d00000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3056.402786][ T3537] input: syz1 as /devices/virtual/input/input224
05:43:47 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0xaa, 0x3, 0x3, 0x4}, 0x10)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:47 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d507007fffffff0000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:47 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
r2 = socket$netlink(0x10, 0x3, 0x14)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x300, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr="91fd6ea36725203ba5a3a5db5b0c118d"}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40)

05:43:47 executing program 0:
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, <r1=>0x0, 0x0]}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={r1, 0x98, &(0x7f0000000180)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x80000000000}, @in6={0xa, 0x4e21, 0x200, @ipv4={[], [], @empty}, 0x48a}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000000240)=0x10)
r2 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r3 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r2, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:47 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

[ 3056.683352][ T3557] input: syz1 as /devices/virtual/input/input225
[ 3056.717272][ T3561] input: syz1 as /devices/virtual/input/input226
05:43:48 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9600)

05:43:48 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000400000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:48 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x7a2c284cc677784b, &(0x7f0000000180)="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", 0x1000)

05:43:48 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x2, 0xffffffff, 0x80, {0x0, 0x1c9c380}, 0x7, 0x80000000})
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={<r2=>0x0, @in6={{0xa, 0x4e24, 0xfa, @rand_addr="8a3f6b7b80324d313d89a513b97d2a7f", 0x9}}, [0x3, 0xba8f, 0x4, 0x4, 0x3ff, 0xfffffffffffffffb, 0x956, 0x7, 0x400, 0x2, 0x0, 0x7f, 0x400, 0x7, 0xfffffffffffff800]}, &(0x7f0000000040)=0x100)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e21, 0x9, @ipv4={[], [], @rand_addr=0x1}, 0x8000}}, 0x5, 0x100}, 0x90)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:48 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
sendmmsg(r3, &(0x7f0000005fc0), 0x80000000000006a, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:48 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3057.313458][ T3580] input: syz1 as /devices/virtual/input/input227
05:43:48 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d5070000d001010000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:48 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x9, 0x4, 0x8000)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:48 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000040000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:48 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x3047155a01116583)

05:43:48 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L+', 0xffffffff80000000}, 0x28, 0x3)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:48 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d5070000000101d000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:49 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9601)

05:43:49 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x10001, 0xffffffffffffff7f, 0x3, 0x77eca289}, 0x4a2d08983091a7e4)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:49 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700007fffffff00e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:49 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x800, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, 0xffffffff, 0x2, 0x80, &(0x7f0000ffc000/0x4000)=nil})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
lsetxattr$security_ima(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='security.ima\x00', &(0x7f0000000540)=@md5={0x1, "8a77d51e40cca19cfbc234adf5ac9e65"}, 0x11, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)=""/22, 0x15e, 0x16, 0x1}, 0x20)
syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x1)
timer_create(0x0, &(0x7f0000000340)={0x0, 0x14, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000380)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000440)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000480))
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:49 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000040)={0x0, {0x3, 0xfffffffffffffffc}})
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0)="fc673b3fdb98d16a7e73aa0afe0396f476a79e050afca571284de60839ef51c6cdfce33f0e17c429a57382634531d2b55f557fbad9881e305551ddfba56bd021184c91e8b893c852de07fd73f122fa28c769e62af5425d9d1c141a60d713150bcb01ddc3b4a9f3d213be88d5084a06cd17d45c672ab36a6e745cccd8ffc133fe66f616bb7a1d889ed845846181e1cd30c3a87460156a7feae67b300fb1e67b600ae0f8baf7ed8e22e207df69315dbffd2860e17ab9135acf0db96e08685967e2e023bd", 0xc3, r0}, 0x68)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:49 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3058.320449][ T3623] input: syz1 as /devices/virtual/input/input229
[ 3058.357959][ T3630] input: syz1 as /devices/virtual/input/input230
05:43:49 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000004000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:49 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:49 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$TCSBRKP(r1, 0x5425, 0x100000001)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:49 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
pwrite64(r0, &(0x7f00000000c0)="8055c7422d50469e2605b0bd6116395dc36bc9580b14262c5c56c55ef2c8721fcd768f9f40f34d1e6be7cee626632a1ef5e915053c5a6ca87bddd16154d39ad10a109fc59735b94d39ab3cdb81733b54fe19af8af5f9", 0x56, 0x1)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040)={0x1f}, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:49 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d507000000d0010100e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:49 executing program 0:
r0 = socket(0x1b, 0x800, 0xffffffffffffff88)
ioctl$sock_proto_private(r0, 0x89ee, &(0x7f00000001c0)="5949f900275620445b942deed9a561787e2fbca4dc6eb110b80d0ea61c78")
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0xfffffffffffffdd1)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000180)={&(0x7f0000000240), 0xffffffffffffff99, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x5, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x12}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r3 = semget(0x0, 0x2, 0x466)
semctl$GETNCNT(r3, 0x0, 0xe, &(0x7f0000000280)=""/157)
prctl$PR_GET_TIMERSLACK(0x1e)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@sco={0x1f, {0x1, 0x1, 0x3, 0x9c, 0x0, 0x6}}, 0x80, 0x0, 0x1e9}, 0x40000)
r4 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x7fc, 0x1)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f0000000380)={0x0, {0x6b, 0xcd}})
ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0))
prctl$PR_CAPBSET_DROP(0x18, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080), 0x4)

05:43:50 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000400e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:50 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x10)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x1, 0x3ff]}, &(0x7f0000000100)=0x8)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:50 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9700)

05:43:50 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x29c101, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x800)

05:43:50 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x9}, 0x1c)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x482400)
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000000c0)=""/87)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

[ 3059.259295][ T3664] input: syz1 as /devices/virtual/input/input231
05:43:50 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd001010000000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3059.310987][ T3674] input: syz1 as /devices/virtual/input/input232
05:43:50 executing program 0:
r0 = socket(0x1e, 0x1, 0x3)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x10000, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={<r3=>0x0})
ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000100)={r3, 0x2})
openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x400, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:50 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d507000000000101d0e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:50 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x16400, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000000c0)=0x1)
recvfrom$rxrpc(r0, &(0x7f0000000180)=""/199, 0xc7, 0x10000, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0xfffffffffffffeff}}, 0x24)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:50 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d5070000007fffffffe3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:50 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = accept(0xffffffffffffff9c, &(0x7f0000003200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003280)=0x80)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000032c0)={<r2=>0x0, 0xfffffffffffffff8, 0x5, [0x88e, 0xfffffffffffffa8a, 0x1f, 0x81, 0xfff]}, &(0x7f0000003300)=0x12)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000003340)={r2, @in6={{0xa, 0x4e21, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7ff}}, 0xe, 0x8, 0xfffffffffffffff7, 0x200, 0x100}, &(0x7f0000003400)=0x98)
r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:50 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000040000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3059.557620][ T3700] input: syz1 as /devices/virtual/input/input233
[ 3059.583256][ T3701] input: syz1 as /devices/virtual/input/input234
05:43:50 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000400e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:50 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983040000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:51 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9701)

05:43:51 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:51 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983d00101001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3060.193261][ T3719] input: syz1 as /devices/virtual/input/input235
05:43:51 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffed5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x143, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:51 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:51 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000004001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3060.240383][ T3722] input: syz1 as /devices/virtual/input/input236
05:43:51 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000080)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:51 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000101d01d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:51 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x1ff)
r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000140)=0x6e)
write$binfmt_aout(r0, 0x0, 0xffffffffffffff4a)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40000, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={<r2=>0x0, 0xffffffff7fffffff}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e22, @loopback}}, 0x80000000, 0x7450, 0x1, 0x7fffffff, 0x4}, &(0x7f0000000100)=0x98)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x8001}, 0x1c)
ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000340)=""/157)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:51 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a19837fffffff1d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:51 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x10000000000002, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=<r1=>0x0)
prlimit64(r1, 0xb, &(0x7f0000000080)={0x401, 0xec}, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x381000, 0x0)
bind$rose(r3, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000140)="9d1eb2bc62a69f0e9f7030eb4bee6b99fa6cef6d81d96cefca5f1d5d09af90c0f15608f07b4f94733d893e9004fa14198fb1621ddc0a74c80204c6e776904ece34f465b384db072909c39e8d04674dccc15b638bd9387031e02fadc20707745eb0c138a9ebb876d202dd58bcb4fbcf895e7494d82c6a6e75e46050e1f765226754b0ad6998adde2cb1c7189199516315d545aba9f371b34bdbda")
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000040)={0xb, @vbi})
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:51 executing program 0:
r0 = socket(0x1e, 0x200000006, 0x2)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x2000000001d, 0x100000000000d, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000}, 0x1c)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0)
ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3)

[ 3060.559031][ T3749] input: syz1 as /devices/virtual/input/input237
[ 3060.578294][ T3753] input: syz1 as /devices/virtual/input/input238
05:43:52 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000400001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:52 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x6, 0x7, 0x401, 0x200, 0x1, 0x80000001, 0x6}, 0x1c)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:52 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9800)

05:43:52 executing program 5:
r0 = semget(0x2, 0x3, 0x440)
semop(r0, &(0x7f0000000040)=[{0x1, 0x7, 0x1800}, {0x5, 0xfff}, {0x1, 0x8, 0x1000}, {0x3, 0xfffffffffffffff7}, {0x6, 0x5, 0x1000}], 0x5)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
pause()
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x57, 0x0, 0x0, {0x80000000}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:52 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:52 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000004001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:52 executing program 0:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000080)={0x9ef3, &(0x7f0000000180)="a5809fbff070897da0f17357fb035d2858ca8222db935d67c7bfe035e1d8453903b17ae03e8808da8eec2cfe49c3bb06323e33199e978442b392a39953b013c77e0632e103f8f146efd052172d56ac320be0a320875fda56674cc69d2afeeb3ff77c488fdf9b1d23a371be711679b99399cf2b27faba0452ce7db86c5f62a49527049500defd4bfc1897e5c460207a7a5d6eb050b70ad5566f1d2c1f144b29307bccc026733a619340bd04c63a39dd2284892931d00de4e6c75329972ff1cb3a77ebf46cfc3ed4e09ece8abbdcea18a5c55dd95feb9e9929eb048b2ccf5aac45fdcf9b60776c96ae3ec08783"})
r1 = socket(0x840001e, 0x2, 0x5)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0x200, 0x4)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000280)='vcan0\x00')
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000002c0)={@host})
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xfffffffffffffff9, 0x400040)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3061.237743][ T3770] input: syz1 as /devices/virtual/input/input239
05:43:52 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24280227800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:52 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x401, 0x100000001, 0x1, 0x1, 0x1, 0x3, 0x3e, 0xaf39, 0x399, 0x38, 0x2c2, 0x3, 0x4, 0x20, 0x2, 0x5, 0x1200000000000000, 0x5}, [{0x0, 0x8, 0x80000001, 0x9, 0x3800000, 0x0, 0x5d9, 0xdab}, {0x4, 0x2, 0x5, 0xa84a, 0x100000001, 0x401, 0x8, 0x6}], "b86c6c8872ec0472f49e390842ab3cdf1ceb4c3d52e62b2063ac130f05c775a6594396c33f914177a7bea1b44aea2f5444dc220a313a396f770afe8b888663f95d33f2b306ebf0a7e46a6f94def25cfea8b0d2e6c5cb0d6350b25f706039bba577b4917a447e5afd1d4873007a75cf8d4500430e4b0cd7fb5669f83dc3f7c1a6a8b4f1f22522c6da", [[], [], [], [], [], [], []]}, 0x800)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x6431, @mcast1, 0x4}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:52 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
uname(&(0x7f0000000080)=""/103)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:52 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24280a27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:52 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffe5)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0)
ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f00000002c0)=0x6)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@llc={0x1a, 0x0, 0x80000000, 0x7ff, 0x0, 0xffff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, 0x0}, 0x0)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00')
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000280))
ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000240)=0x7)
r4 = request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='/dev/mixer\x00', 0xfffffffffffffffc)
keyctl$describe(0x6, r4, &(0x7f0000000380)=""/159, 0x9f)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2900200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="02000020", @ANYRES16=r3, @ANYBLOB="000029bd7000fbdbdf25020000000800030032000000080002000a000000080004000100000008000300ff00000004000500080003002d000000"], 0x40}}, 0x2c4e572d2f3146e9)

05:43:52 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e270f0000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:52 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x6, 0x80000000)
getsockopt$netlink(r0, 0x10e, 0xf, &(0x7f0000000000)=""/10, &(0x7f00000000c0)=0xa)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
pipe(&(0x7f0000000080))

[ 3062.038861][ T3804] input: syz1 as /devices/virtual/input/input240
05:43:53 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9801)

05:43:53 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000040)={0x0, <r1=>0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r1, 0x4)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:53 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800400100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:53 executing program 0:
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:53 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:53 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
socket$netlink(0x10, 0x3, 0x1f)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0)
close(r1)
openat$cgroup_ro(r0, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0)
readv(r1, &(0x7f00000002c0), 0x1a5)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x3ff, 0x101800)
write$binfmt_aout(r3, 0x0, 0x881715f04e849e80)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x3f, {{0x2, 0x4e20, @local}}}, 0x88)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:53 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x3c56, 0x200, 0x648}, 0xc)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={<r2=>0x0, 0x4}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={r2, 0xfff}, &(0x7f00000001c0)=0x8)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:53 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0xf, 0x0}, 0x0)

[ 3062.343309][ T3822] input: syz1 as /devices/virtual/input/input241
[ 3062.395217][ T3829] input: syz1 as /devices/virtual/input/input242
05:43:53 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:53 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x204f5080, 0x0}, 0x0)

05:43:53 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00')
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000080)=0x810, 0x4)

05:43:53 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000240)=""/52, &(0x7f00000000c0)=0x34)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x50, &(0x7f0000000180)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x7ff, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x8000, 0x8001}, 0x8)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3062.672089][ T3846] input: syz1 as /devices/virtual/input/input243
[ 3062.702554][ T3847] input: syz1 as /devices/virtual/input/input244
05:43:53 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9900)

05:43:53 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:53 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2802, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:53 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x2, 0x4, 0x1, 0x2c16f4dc}, 0xfffffffffffffeb8)
r1 = socket(0x1e, 0x805, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12a41d88b070")
getpriority(0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48840000}, 0xfffffd33, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="740000008796906f571ada3eb1905bd74ad3429ff63d10e50cf2c6bf87c33de5b5a711cc39a7f25c868972444b3195d7fff0e8477244a7f317fc2c113bba9f877735a85c38ba44a87aa50b75a7f711f070f1a2de19a299d364ebb87ecea2de185e6cd4ee8af0f9e9de94fdc3aed04d0f67f5e3329fc72353dce9df124bd5deef22c2fdd6a852b93da31eaaea35abdb6670a82eac4b072c8e14183c5880172cc269f85c7d23a28dba0cb7426972f3b682071f745d", @ANYRES16=r3, @ANYBLOB="20082dbd7000fedbdf25010000ffffffef000000000000000000000001080006001f000000000018000400010001000100000001000000020000000600000070090000848700000f000100000000000000000000000000000000002c7bd8d2fdd4769ec2758c2fd0f677e388c262d67bc38949cb632b5ac01dc2c62ee9b94342591e18dbc7cfe021db454d4f160dcf4a23a860d7cc9b7d4cfb4510986404c17efa319ab5398a49883ae7bef822ccd88a726ce5c91c9ac0869342313d8f370015eb739e89000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x404000000}, 0x8000)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:54 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:54 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0xfffffffffffffffd, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='veth0\x00')
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
r3 = syz_open_dev$swradio(&(0x7f0000001d00)='/dev/swradio#\x00', 0x1, 0x2)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4})
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000300)={{0x81, 0x4, 0x1, 0x3}, 'syz1\x00', 0xf})
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000140)={0x0, 0xffffffff80000001, 0x8, 0x4, 0x1, 0x100, 0x5, 0xa, {<r5=>0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1, 0x5, 0xffffffffffffffff, 0x9, 0x6}}, &(0x7f00000000c0)=0xb0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r5, 0x3}, 0x8)
ioctl$VIDIOC_DQEVENT(r3, 0x80885659, &(0x7f0000000240))

05:43:54 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:54 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfffffe4d)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:54 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x1c1000, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0xa082, 0x0)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000200))
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
sendmmsg$inet_sctp(r2, &(0x7f0000000040), 0x0, 0x40)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:54 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
uselib(&(0x7f0000000000)='./file0\x00')
ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000080)="81ec0ba2e9b0a16cd75e1e15b2b8c0887df8bc4fa0bcf16e5a64aec6d14ca58827961d40c2afe9047b8d05d2db94ab60cbc6f19e8193f3496ba37d2b9f3e0931b9476f98be996794325968480a04da75f91ea7e02946d15475261c47171bfb8043ea81806a64a41b34")
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00', <r2=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@rand_addr=0x81, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x80, 0x11, r2, r3}, {0x6, 0x5, 0xa1, 0x13e4b926, 0x7, 0x9, 0x5, 0x4}, {0x0, 0x100000000, 0x1d72, 0x6}, 0x7fffffff, 0x6e6bbb, 0x0, 0x1, 0x2}, {{@in6=@local, 0x4d4, 0xff}, 0x2, @in=@empty, 0x3503, 0x3, 0x0, 0x3, 0xfffffffffffffffb, 0xffff, 0x10001}}, 0xe8)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:54 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3063.295267][ T3877] Unknown ioctl 35111
[ 3063.358485][ T3886] Unknown ioctl 35111
05:43:54 executing program 0:
r0 = socket(0x100000001e, 0x1, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_targets\x00')
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101, 0x0)
fanotify_mark(r1, 0x29, 0x2, r2, &(0x7f0000000100)='./file0\x00')
r3 = socket(0x1e, 0x5, 0x10000000000000)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3, 0x24, 0x10001, 0x3}, 0x3)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:54 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9901)

05:43:54 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:54 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
timerfd_create(0x6, 0x80800)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x2000, 0x0)
write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffeffff}, 0x2)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040))

05:43:54 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:55 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:55 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:55 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0)
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:55 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:55 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000000)=0xe8)
sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f00000000c0)={0x1, 0x800, 0xfe1, {}, {0x77359400}, {0x3, 0x6, 0xf6e, 0x2}, 0x1, @can={{0x4, 0x1b, 0x10000, 0x6}, 0x0, 0x1, 0x0, 0x0, "d0ce3e6ac2fd44cc"}}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)

05:43:55 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x72)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x240201, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000000))
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ustat(0x1f, &(0x7f00000000c0))
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:55 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3064.140548][ T3931] input: syz1 as /devices/virtual/input/input245
[ 3064.177118][ T3935] input: syz1 as /devices/virtual/input/input246
05:43:55 executing program 0:
r0 = socket(0x1e, 0x80006, 0x1000)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={<r1=>0x0, @in={{0x2, 0x4e23, @empty}}, [0x1, 0x80, 0x7, 0x9, 0x4, 0x5, 0x7ff, 0xc1, 0x0, 0x6, 0xee7d, 0x5, 0x4, 0x9, 0x5]}, &(0x7f0000000380)=0x100)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={<r2=>r1, 0x9, 0x10}, &(0x7f0000000500)=0x3ae)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x3}, &(0x7f0000000100)=0x8)
r3 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getpeername$unix(r3, &(0x7f00000001c0), &(0x7f0000000080)=0x6e)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=""/245)

05:43:55 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9a00)

05:43:55 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:55 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400801, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000080)={r3, 0x7})
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:55 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3064.852545][ T3959] input: syz1 as /devices/virtual/input/input247
[ 3064.895904][ T3963] input: syz1 as /devices/virtual/input/input248
05:43:55 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:55 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0xffff, @dev={0xfe, 0x80, [], 0x27}}, 0x13)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e21, 0x100, @local, 0x9}, 0x7ae6202b9cce8dce)
socketpair(0x5, 0xb, 0x6, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)=0x5)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'veth0\x00', {0x2, 0x4e24, @broadcast}})

05:43:55 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:55 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000)=0x3, 0x4)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x1c3efe6e, 0x4, 0x470, 0x2, 0x100, 0x80000000, 0x2b}, 0x326)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
getrusage(0x1, &(0x7f0000000200))
bind(r0, &(0x7f0000000180)=@isdn={0x22, 0xb628, 0x800, 0xef, 0x6}, 0xf)

05:43:56 executing program 0:
r0 = dup(0xffffffffffffff9c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0x6, @mcast2, 0x9}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x26}, 0xd2}], 0x38)
r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @dev={[], 0x2a}}, 0x10)
r3 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000000))
setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000080)={0x3f, @remote, 0x4e23, 0x2, 'nq\x00', 0x2, 0x3, 0x5}, 0x2c)
r4 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r3, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:43:56 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x4}, 0x0)

05:43:56 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480)='/dev/uinput\x00', 0x100000802, 0x0)
setxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "6e8eb98a0ac9a5d5bd541e005489d1f5"}, 0x11, 0x2)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x2000)
recvfrom$unix(r1, &(0x7f0000000140)=""/191, 0xbf, 0x2001, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
connect$pppoe(r1, &(0x7f0000000540)={0x18, 0x0, {0x2, @random="65659191af6a", 'bridge0\x00'}}, 0x1e)
pread64(r0, &(0x7f0000000340)=""/110, 0x6e, 0x81)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000440)=@generic={0x0, 0x2, 0x7f})
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x20000007ffd, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:56 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x101d0}, 0x0)

[ 3065.200775][ T3984] input: syz1 as /devices/virtual/input/input249
[ 3065.223721][ T3987] input: syz1 as /devices/virtual/input/input250
05:43:56 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9a01)

05:43:56 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:56 executing program 0:
r0 = socket(0x100001e, 0x7, 0x967)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x7530}, 0x10)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x404, 0x0)
ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000000c0)=0x100)

05:43:56 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x40000}, 0x0)

05:43:56 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1, 0x94100)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3065.797824][ T3998] input: syz1 as /devices/virtual/input/input251
[ 3065.835195][ T4001] input: syz1 as /devices/virtual/input/input252
05:43:56 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
r1 = getpid()
setpriority(0x2, r1, 0x5)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:43:56 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x400200007fe, &(0x7f00000002c0)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES16], 0xffffffe6)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@nfc, 0x9005, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x811e}, 0x300)

05:43:56 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0xd0010100}, 0x0)

05:43:56 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x807, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:56 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0xffffff7f}, 0x0)

[ 3066.057697][ T4020] input: syz1 as /devices/virtual/input/input253
[ 3066.095608][ T4024] input: syz1 as /devices/virtual/input/input254
05:43:57 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x4000000000000}, 0x0)

05:43:57 executing program 0:

05:43:57 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9b00)

05:43:57 executing program 0:

05:43:57 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x1, 0x210182)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x8, 0x4)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2, <r2=>0x0}, &(0x7f0000000040)=0xc)
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @rand_addr=0xffffffff80000001}, 0x5e, r2})

05:43:57 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0xd001010000000000}, 0x0)

05:43:57 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
acct(0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={<r3=>0x0, 0x8}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0xca3e, 0x2, 0x200000000000, 0x4, r3}, 0x10)

05:43:57 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3066.799568][ T4039] input: syz1 as /devices/virtual/input/input255
05:43:57 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0xffffff7f00000000}, 0x0)

05:43:57 executing program 0:

[ 3066.852104][ T4045] input: syz1 as /devices/virtual/input/input256
05:43:58 executing program 0:

05:43:58 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0)

05:43:58 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
signalfd(r1, &(0x7f0000000040)={0x4}, 0x8)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:58 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2000000000000004)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x2000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xffff, @loopback, 0x81}, {0xa, 0x4e21, 0xff, @rand_addr="f761fcc0a80bd37439b630cb00999865", 0x2a9}, r1, 0x6}}, 0x48)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000000c0)='$[\x00', 0x3)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0xb68, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20000, 0x0)
ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000040))

[ 3067.150267][ T4064] input: syz1 as /devices/virtual/input/input257
[ 3067.167722][ T4065] input: syz1 as /devices/virtual/input/input258
05:43:58 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9b01)

05:43:58 executing program 0:

05:43:58 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x101d0}, 0x0)

05:43:58 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x37e)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x3)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x5, 0x800, 0x200}}, 0x30)

05:43:58 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:43:58 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:58 executing program 0:

05:43:58 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x40000}, 0x0)

[ 3067.839468][ T4084] input: syz1 as /devices/virtual/input/input259
[ 3067.912528][ T4078] input: syz1 as /devices/virtual/input/input260
05:43:58 executing program 0:

05:43:58 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0xd0010100}, 0x0)

05:43:59 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000006cc0)=[{{&(0x7f00000000c0)=@hci, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/106}, {&(0x7f0000000240)=""/189}], 0x0, &(0x7f0000000340)=""/106}, 0x9}, {{&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, &(0x7f0000001900)=[{&(0x7f0000000440)=""/191}, {&(0x7f0000000500)=""/211}, {&(0x7f0000000600)=""/21}, {&(0x7f0000000640)=""/139}, {&(0x7f0000000700)=""/4096}, {&(0x7f0000001700)=""/53}, {&(0x7f0000001740)=""/106}, {&(0x7f0000006e80)=""/242}, {&(0x7f00000018c0)=""/42}], 0x0, &(0x7f00000019c0)=""/171}, 0x7}, {{&(0x7f0000001a80)=@llc, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001b00)=""/37}, {&(0x7f0000001b40)=""/82}, {&(0x7f0000001bc0)=""/196}, {&(0x7f0000001cc0)=""/112}], 0x0, &(0x7f0000001d80)=""/123}, 0x1ff}, {{&(0x7f0000001e00)=@tipc, 0x0, &(0x7f0000005140)=[{&(0x7f0000001e80)=""/150}, {&(0x7f0000001f40)=""/4096}, {&(0x7f0000002f40)=""/61}, {&(0x7f0000002f80)=""/127}, {&(0x7f0000003000)=""/93}, {&(0x7f0000003080)=""/4096}, {&(0x7f0000004080)=""/4096}, {&(0x7f0000005080)=""/172}], 0x0, &(0x7f00000051c0)=""/176}, 0x200}, {{&(0x7f0000005280)=@isdn, 0x0, &(0x7f0000005400)=[{&(0x7f0000005300)=""/5}, {&(0x7f0000005340)=""/120}, {&(0x7f00000053c0)=""/39}], 0x0, &(0x7f0000005440)=""/89}, 0xff}, {{&(0x7f00000054c0)=@nfc_llcp, 0x0, &(0x7f0000005ac0)=[{&(0x7f0000005540)=""/4}, {&(0x7f0000005580)=""/169}, {&(0x7f0000005640)=""/77}, {&(0x7f00000056c0)=""/130}, {&(0x7f0000005780)=""/8}, {&(0x7f00000057c0)=""/178}, {&(0x7f0000005880)=""/198}, {&(0x7f0000005980)=""/30}, {&(0x7f00000059c0)=""/214}], 0x0, &(0x7f0000005b80)=""/176}, 0x5}, {{0x0, 0x0, &(0x7f0000005c80)=[{&(0x7f0000005c40)=""/63}], 0x0, &(0x7f0000005cc0)=""/4096}, 0x10001}], 0x4000000000003cd, 0x2000, 0x0)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/capi/capi20\x00', 0x10000, 0x0)
ioctl$KDSETLED(r1, 0x4b32, 0x8)

05:43:59 executing program 0:

05:43:59 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7ff, 0x400000)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000000c0)={0x3, "facdaa"}, 0x4)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000140)=""/130)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0)

05:43:59 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9c00)

05:43:59 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0xfffffffffffffc96)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x80002)
ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000040)=0x4)

05:43:59 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:43:59 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0)

05:43:59 executing program 0:

05:43:59 executing program 0:

[ 3068.782928][ T4116] input: syz1 as /devices/virtual/input/input261
[ 3068.843284][ T4120] input: syz1 as /devices/virtual/input/input262
05:43:59 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0)

05:43:59 executing program 0:

05:43:59 executing program 0:

05:44:00 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001a80)=[{{&(0x7f0000000100)=@x25, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001b40)=""/72, 0x48}, {&(0x7f0000000240)=""/70, 0x1b0}, {&(0x7f0000000340)=""/89, 0x59}], 0x3, &(0x7f00000003c0)=""/242, 0xf2}, 0x4bc8}, {{&(0x7f00000004c0), 0x80, &(0x7f0000001800)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/187, 0xbb}, {&(0x7f0000001600)=""/179, 0xb3}, {&(0x7f00000016c0)=""/186, 0xba}, {&(0x7f0000001780)=""/74, 0x4a}], 0x5}, 0xffffffffffff3ae0}, {{&(0x7f0000001880)=@x25, 0x80, &(0x7f0000001980)=[{&(0x7f0000001900)=""/73, 0xfffffffffffffd7e}], 0x123, &(0x7f00000019c0)=""/183, 0xb7}, 0xc4a}], 0x3, 0x0, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x10400, 0x0)
ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000040)={0x1, 0x1ff})
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:44:00 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0xd001010000000000}, 0x0)

05:44:00 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xffffffffffff5c64, 0x2)
statx(r2, &(0x7f0000000080)='./file0\x00', 0x2500, 0xfff, &(0x7f0000000140))
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3069.150285][ T4140] input: syz1 as /devices/virtual/input/input263
[ 3069.170867][ T4141] input: syz1 as /devices/virtual/input/input264
05:44:00 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9c01)

05:44:00 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x5, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r0, &(0x7f0000000200)="030400000300600000000000fff55b4202938207d9fb3780398d537500e50600591f301ee60b734dbeaa92d43b16d5c018103443e0650053c0e385472da70100af5ba514d40000efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000000d1843e770afd6e9e", 0x6c, 0x0, 0x0, 0x0)

05:44:00 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0)

05:44:00 executing program 5:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x2})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp\x00')
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20001, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:00 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:00 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)

05:44:00 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x101d0}, 0x0)

05:44:00 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0)

05:44:00 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x400002, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x401)
r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x10200)
connect(r2, &(0x7f0000000080)=@ipx={0x4, 0x20, 0xaa72, "a99c0057365d", 0x3}, 0x80)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:00 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x200000, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x251, 0x2, 0xdb, 0x5}, 'syz1\x00', 0x40})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @speck128, 0x1, "70c09470194b559a"})
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:44:00 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd0010100}, 0x0)

[ 3069.963965][ T4174] input: syz1 as /devices/virtual/input/input265
[ 3069.976914][ T4177] input: syz1 as /devices/virtual/input/input266
05:44:01 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00')
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:01 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9d00)

05:44:01 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0)

05:44:01 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00')
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:01 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x80, 0x0)
connect$rxrpc(r1, &(0x7f0000000500)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @mcast2, 0x1f}}, 0x24)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:01 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4000001)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101400, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
socket$inet6(0xa, 0x6, 0x1)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000540)=0xe8)
mount$9p_tcp(&(0x7f0000000200)='127.0.0.1\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e23,afid=0x0000000000000009,dfltuid=', @ANYRESHEX=r3, @ANYBLOB="2c7569643c5451682543714df4031ed7c579e2239ba4e68de0d2c333d90b46774da3bfc124074aec4ec097f9e0fe67dcdbc5ffb026f7df14197ec84d1fe80ac19af715a109f7a6bed57596b7e2019f34525b6ef980d7eea00cb137634419d0c37ed7adf945e06c31df09f23eff32b347581df4710746887e08f0ac1880fa74ac1273bd5e3c0002e8be65bea4b6612a6a04be429bf2b1dbe9b122a021d92387609338a258bb9df228f10090769b6307d2e85aee82c1620a0cc204eb57a26a40d5613d19b79d233e518efb9d053b000000000000000000", @ANYRESDEC=r4, @ANYBLOB=',measure,seclabel,\x00'])
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:44:01 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:01 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00')
accept$unix(r0, 0x0, &(0x7f0000000740))

[ 3070.670515][ T4200] input: syz1 as /devices/virtual/input/input267
[ 3070.698986][ T4206] input: syz1 as /devices/virtual/input/input268
05:44:01 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0)

05:44:01 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00')
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:01 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400000, 0x0)
ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0)
mknodat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x9)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {0x0, 0x8000000000}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:01 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:01 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd001010000000000}, 0x0)

[ 3070.944458][ T4225] input: syz1 as /devices/virtual/input/input269
[ 3070.973278][ T4225] input: syz1 as /devices/virtual/input/input270
05:44:02 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0)

05:44:02 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:02 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9d01)

05:44:02 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000340)={{0x1, 0x0, 0x100000000, 0x4, 'syz0\x00', 0x20}, 0x0, [0x2, 0xfff, 0x1, 0x80000001, 0x7fff, 0x4, 0x900000000000, 0x7, 0x2, 0x7, 0x0, 0x3f, 0x7f, 0x9, 0x4, 0x0, 0x8000, 0x800, 0x0, 0xff, 0x1, 0x2, 0x100000000, 0xffffffffffff0001, 0x0, 0x7, 0x7, 0x9, 0x3, 0x9, 0x477, 0x8, 0x4, 0xffff, 0xfffffffffffffffc, 0x1c, 0x100, 0x7f, 0x1f, 0xe0, 0x2, 0x3, 0xd7ca, 0x7, 0x1, 0x6, 0x5, 0x9, 0x6d81ffa9, 0xae, 0x3, 0x4, 0x5, 0xbc, 0x10001, 0x7, 0x800, 0x1ff, 0x0, 0x7fff, 0x101, 0x5, 0x80000000, 0x5, 0x91, 0x7e, 0x6, 0x800, 0x9, 0x4, 0x8, 0x7f, 0x0, 0x7, 0x8, 0x101, 0x0, 0x1f, 0x2, 0x7ff, 0xffffffffffffffff, 0x2, 0x100000001, 0x80000000, 0xa1, 0x3dbb, 0x4, 0x3, 0x8, 0x0, 0x7, 0x59c, 0x3, 0xa8, 0x1, 0x0, 0x5, 0x0, 0x100, 0x7, 0x9, 0x0, 0x7ff, 0x8, 0x9ef, 0x2, 0x9, 0xfffffffffffffffb, 0x4, 0xb17b, 0xd384, 0x9, 0xe3, 0x7, 0x6a, 0x6, 0x19f2, 0x0, 0x101, 0x3c60000000000000, 0x40, 0x2, 0x8, 0x9, 0x4, 0x6, 0x5, 0x1ff], {0x0, 0x989680}})
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:44:02 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:02 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$CAPI_INSTALLED(r0, 0x80024322)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3071.651704][ T4244] input: syz1 as /devices/virtual/input/input271
05:44:02 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

[ 3071.694850][ T4250] input: syz1 as /devices/virtual/input/input272
05:44:02 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

05:44:02 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

05:44:02 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0)
getsockopt$llc_int(r2, 0x10c, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

05:44:02 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

[ 3071.956762][ T4265] input: syz1 as /devices/virtual/input/input273
[ 3071.976510][ T4266] input: syz1 as /devices/virtual/input/input274
05:44:03 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

05:44:03 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00')
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x0, 0x2})
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000140))
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
fcntl$setflags(r1, 0x2, 0x1)

[ 3072.216644][ T4275] input: syz1 as /devices/virtual/input/input275
[ 3072.235955][ T4275] input: syz1 as /devices/virtual/input/input276
05:44:03 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:03 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9e00)

05:44:03 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

05:44:03 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x8077, 0x3})
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:03 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:03 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000001, 0x0)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x31f)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
fchmod(r1, 0x100)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

[ 3072.581070][ T4286] input: syz1 as /devices/virtual/input/input277
05:44:03 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

[ 3072.623864][ T4286] input: syz1 as /devices/virtual/input/input278
05:44:03 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

05:44:03 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
pread64(r0, &(0x7f00000000c0)=""/22, 0x16, 0x0)
syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x2, 0x10080)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x65, 0x4)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:03 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x300f})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
r3 = getpgid(0x0)
perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x9, 0xffffffffffff0001, 0x8, 0x5, 0x0, 0x7, 0x90011, 0x8, 0x9, 0x40, 0xfe10000000000, 0x87cd, 0x400, 0x5ed, 0x829f, 0x118, 0x80000001, 0x100, 0x7, 0x943, 0xc1a8, 0x8d9, 0x3ff, 0x2, 0x3, 0x1, 0x5, 0x0, 0xe56, 0xef0, 0x32f, 0xffffffff00000000, 0x6, 0x8, 0x7ec, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x401, 0x4}, 0x20042, 0x7, 0x400, 0x4, 0xfffffffffffffff7, 0x9e, 0x80}, r3, 0x10, 0xffffffffffffffff, 0x1)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x13)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000140)=0xffffffff)

[ 3072.866234][ T4305] input: syz1 as /devices/virtual/input/input279
[ 3072.895417][ T4308] input: syz1 as /devices/virtual/input/input280
05:44:03 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x4)

05:44:04 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x101d0)

05:44:04 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:04 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9e01)

05:44:04 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000240)='/dev/capi20\x00', 0x2000, 0x0)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x478, 0x150, 0x0, 0x0, 0x0, 0x150, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3, &(0x7f0000000200), {[{{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x401, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x0, 0x101, 0x800, 0x2, 0x705], 0x1800000, 0xb9}, {0xffff, [0xffffffff, 0x7, 0xf6f5, 0x8, 0x6, 0x3], 0x8, 0x6}}}}, {{@uncond, 0x0, 0x230, 0x290, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x8, [0x1, 0x4, 0x6658, 0xfffffffffffffff7, 0x2, 0x9], 0x40, 0x2}}}, @common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'bpq0\x00', {0x7f, 0x7, 0x10, 0x81, 0x4, 0x81, 0x0, 0x3, 0x78, 0xe0}, 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x40, [0x0, 0x7f, 0x8, 0x0, 0x9, 0x6], 0x9, 0x10001}, {0x1000, [0x100000001, 0x3f, 0x1, 0x80, 0x3462, 0xbf], 0x8, 0x8}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x540, 0x10)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000080)=@sack_info={<r4=>0x0, 0xfff, 0x10000}, &(0x7f00000000c0)=0xc)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x4, 0x100, 0x8, 0x0, 0xee2, 0x1, 0x8, 0x80000000, r4}, &(0x7f0000000180)=0x20)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:04 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x99, 0x80)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:44:04 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x40000)

05:44:04 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3073.560297][ T4332] input: syz1 as /devices/virtual/input/input281
[ 3073.602142][ T4338] input: syz1 as /devices/virtual/input/input282
05:44:04 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0xd0010100)

05:44:04 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x40000)

05:44:04 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0xffffff7f)

05:44:04 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3073.848777][ T4350] input: syz1 as /devices/virtual/input/input283
[ 3073.867418][ T4353] input: syz1 as /devices/virtual/input/input284
05:44:04 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x4000000000000)

05:44:04 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8000, 0x0)
ioctl$TCSBRK(r0, 0x5409, 0x80000000000000)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0))
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:44:05 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:05 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9f00)

05:44:05 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0xd001010000000000)

05:44:05 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_DESTROY(r0, 0x5502)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:05 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:05 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r2=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001900)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000040)=0xe8)
sendmsg$netlink(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)={0x138, 0x3b, 0x2, 0x70bd27, 0x25dfdbff, "", [@nested={0x128, 0x45, [@typed={0x14, 0x28, @ipv6=@mcast1}, @generic="9259b3e3268a04b68a48295c5f033eae8d39f095664e55f8607d6b4d8544b05f5bc2c90c80252fdd7e0dead96006e42c3fc2143ab84c5bec3f46eeb768bec166528dd8b9c75e202cf7b281edf229991f5b36084ae2c9e8282def51171a0fd3d3f186b9ba111aa4dda105b6a7571619651d4f0ba51a03bc925ab150191414cd77e4415098b73a5aa6c8fda5bf0c55d437284bfcdaec22d023bc421466e637ebeaa71ebbbdd5b99217101d694a774408420de2e7431c91f57870a17046e96495c140050a8a2f22479bbbeba9f1cc91cd0693b724c8f4", @typed={0x8, 0x41, @fd=r0}, @generic="4fd385a17a15ce6831173ce032bcd773d4acb7b6be025231d652238b6cf600c6cb5bd970b360c95b410539963993d410"]}]}, 0x138}, {&(0x7f0000000340)={0x1204, 0x20, 0xb18, 0x70bd29, 0x25dfdbff, "", [@nested={0xa0, 0x5b, [@generic="b6ad6b016bad864e291982ae75f5a775ebce3a35b082a78cd3f7b292af2af973d093315631", @generic="b2c9f3e28d1311243a6300e543aec7b961812b3b70cee8d0d6d042a57c36fa642c4054b1b9761f36c0b9bcf7ff1573d01ce1a1e82111f0d8472e0a26480dc934bfa38f34f0b26c8539a4c3f2a5867a2e3898f87e2c651b32ca5bcc33bb6c867967b2969f05894e9901e8a65473a2e3fee60bd2aaed062b"]}, @typed={0x30, 0x8f, @str='mime_typesystemcpusetuserlomd5sum{bdeveth1\x00'}, @nested={0x14, 0x6c, [@typed={0x10, 0xc, @str='vboxnet0$\x00'}]}, @generic="4283e1c4f110bc4c0d7fb9d6830ee245382dd1fe360e579b7e8083bf997bf830723a46af", @nested={0x10ec, 0x66, [@generic="2852de4040e0020c3f0db32c80f09f482e3e735f0fe17c695d01e8a78a76df1d18750790edcd40be4919126b911e0e14c406ca6fee89cd9b3a77975c0e2fbe8d390067e388873ce608b3d2e66dd2b8aeace5901f70aad867c36bd1493fe02a5e4919fa1bff50ee79b4a9d9cd54723be1fbd90c0aa4ca39deb3fb3abfbfcd82e36fe0013251c8ca006ad1faab514b3fc0f5fc29aacb2ffac1f7f47b10c26dc9354abb20a79398accd451539d36299f4e2", @typed={0x14, 0x9, @ipv6=@ipv4={[], [], @multicast2}}, @typed={0xc, 0x1d, @u64=0xfff}, @typed={0x8, 0x8d, @ipv4=@remote}, @generic="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", @typed={0x8, 0xf, @u32=0x40}, @typed={0x8, 0xb, @ipv4=@multicast1}]}]}, 0x1204}, {&(0x7f0000001580)={0x10c, 0x3f, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@generic="60b44fbed4d0ef638d840e31a4f515066857636a36d60bcf0aff51467b05e260bffde89f24430dc3cb4ae2902fee51f6d7dbf64a259c527da519b3b9b756d90ba01cc5cf207619bac7c0a5d36f2cefb9c512a48478e49f3f738d544faab594117cca3a5f7f5395eb439800b915fef9192703", @generic="3c6adca42cb7e98d46500f93bdbbc500515dff466a6ae1e46b455fcd6744957c1822435e4e33d86acca23c6c60532a2ef7c16512c28458cd01603d67aca344ac9105935baab3455c233f6a5801", @generic="e61f0dce1296caceefd99028c5d0339e83ab878842586ae9e2947b114e88b9aef34e2247faed8b3727a9b4d92a2e91ef6ba0d837b19bd657c43cfa8c"]}, 0x10c}, {&(0x7f00000016c0)={0x20c, 0x3b, 0x20, 0x70bd26, 0x25dfdbfc, "", [@generic="6deb63bd91f6272227a628ef12ce0f333657f6e5aeb7ea02eca64831b2c3f7a5871206e77a3b5a93a8c43035dd7e1ed432ac4e9d0d4e12d0587bed0b95986ae2d419607db1040910c13033c7eaf0301b568bebf6dd90c9e3b6f85554388c9f2f5d481716da6391744f8daf55a1c8f1c6a4295d378a978e61964f580feea1e584975a37657472108d313897227fb8", @generic, @generic="623ed5da0f808116d128b83264f1711960ed5381d3b665d2459b71e21522486c3f533746261f5211a0cb2f242300cb57a6a59eefa24dcf18918e4827c72d3fe9c1a2cf55e32bbd0fea949861f3f94d1530c4230f86923f20d930a63f0378cabadcb7ec2097483ddcbda2251a6813eaf8b013aee10a9d0a5fcc1f637aca6e00cba15ebf613f3aee6829490571a4ae6065a2da3fc54d8617db47dfd7205664de665da29386c71a24e4849c52eec396", @generic="3ff208e65ee4446e00cf41eea4235fcef8800ff222ef30af89147428195635d86dc0b735accf314b82b23b81daed31c9931be74d5a2ecc1b70e867e05ef01edd5e07bb5150146ab4731aca24d6cdc4b9c41dc52143b4625cdf375e777d5e3baf1b53d4d328a784e37e76f59d40969dd1497a99d1e24a228d0a9cc3401569b2d62037a38b85edb95636484846665e1a8a7e106a92dfb92f6bbcbd3fe92d3f016e1a70d0b6209369b32f412a66", @nested={0x14, 0x31, [@typed={0x8, 0x35, @ipv4=@rand_addr=0x1ff}, @typed={0x8, 0x73, @pid=r2}]}]}, 0x20c}, {&(0x7f0000001a00)={0xd8, 0x19, 0x30, 0x70bd2a, 0x25dfdbfe, "", [@nested={0xc8, 0x91, [@generic="78130995b344cd7b27da2d95da22c8ac2b2b27cc8e3c2c5161b456f61aa8b61b1102ffbebd4bcc1efe04ecc36fac5e7ddd82f44228394e88c2676c2427c3ac7d8f0b4a39441a132ffcfe6cef2f5f363e5baa021f56eee384547fc9c3d5def6550a9e528dfa8eea62733bcb78ff09cc297de01182add33db456700163bdca278137ebea7fd141ed9e4df34a6582cef3e495db5b3cbadfa27ecbd38d9b0b42a22a0139e7779e4e5b8cdba13f44f47f51373665926c61a51cd8a1", @typed={0x8, 0x4a, @uid=r3}]}]}, 0xd8}, {&(0x7f0000001b00)={0x1d4, 0x1d, 0x8, 0x70bd2d, 0x25dfdbfe, "", [@generic="16d62388b8964169ec1c84d275d0299d841760f54fde629635b52faf1c58b873d8eedc77e5bfd20cf74b8a4759ab2d1c0213155859e2a5833a4b052f61f92c84a1df2b88bd3275582461cb637f9e2cef1f0affaaeeddd16214a89c2708b04d02a83e5ff715bd1b83c9aad260449207e4237749d3c800e586b928670122a740974ca98c3034b59c5ac962c4be2fae2be52003", @generic="24554d525bd3e6b2a0debc", @typed={0xe4, 0x85, @binary="b670428597aa612d85578c5e181fd515ccbac78bbd9319c8a8f8bc1ae30861fee6b27673fe60b6c9d647d6513b7983d097185a54a6672c7931e805904718245cc908aad2c1e35a9d7f98740afca37097c2c40a45920e583899a532b72def5982b3c0575b8df76ad6a98282b7998a1132851706ed2b9d3bef784f664226f5d8750cf5e5c4f3eb6dee6a6e2af47d19e110456128d52fa9fb634df7be1af5837741dedf3f841a112f8a06456236b7d223c262478c63f4c295cea855e56caa5be1f584d827303e1981c0c2e947aa96390f8d96f4bb3a1a92f189e311e88578e5"}, @generic="a645840f19388eb1931e4e0b8bfe0cb7709351442adff788b461978ca0eefae19cdd291981b0571279b25169a564ea630bf00b486c8857828ff6dfeb12adc0783f"]}, 0x1d4}], 0x6, &(0x7f0000000140)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18, 0x10}, 0x20040800)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/dlm-control\x00', 0x2000, 0x0)
write$P9_RWRITE(r4, &(0x7f0000001d80)={0xb, 0x77, 0x2, 0x9}, 0xb)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:44:05 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x3)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:05 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0xffffff7f00000000)

05:44:05 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:05 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x3fffffff, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchown(r1, 0xee01, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {0x0, 0x8}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:05 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:05 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = fcntl$dupfd(r1, 0x406, r0)
r3 = getpgrp(0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000180)={{0x5, 0x2, 0x8e, 0xffff, 'syz1\x00', 0x8}, 0x0, 0x200, 0xfffffffffffff25a, r3, 0x7, 0x5, 'syz1\x00', &(0x7f0000000080)=['nodevtrusted+GPL.\x00', '\x00', 'cpuseteth1:}\x00', ':wlan1*nodev\'!ppp0\'vboxnet1\x00', '\x00', 'vmnet0^\x00', 'nodev\x00'], 0x4b, [], [0x10001, 0x1, 0x4, 0x100]})
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:05 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:06 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x49, 0x0, 0x0, 0x0, 0xfffffffffffffdbd}, 0x0)

05:44:06 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x9f01)

05:44:06 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)={0x0, @speck128})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000140)=""/81, 0x51}, {&(0x7f00000001c0)=""/214, 0xd6}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/252, 0xfc}, {&(0x7f0000001440)=""/208, 0xd0}, {&(0x7f0000001540)=""/227, 0xe3}], 0x6, &(0x7f00000016c0)=""/55, 0x37}, 0x10000)
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000001740)=@hopopts={0x3f, 0x11, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x38, {0x100, 0xc, 0x1, 0x3b, [0x8, 0x7, 0x72, 0x4, 0x7f6c, 0x5d]}}, @jumbo={0xc2, 0x4, 0x7ff}, @calipso={0x7, 0x30, {0x7, 0xa, 0x40, 0x5, [0x0, 0x6, 0x8c9, 0x8, 0x8]}}, @hao={0xc9, 0x10, @ipv4={[], [], @empty}}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x354}]}, 0x98)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x3)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:06 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:06 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x4)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:06 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={<r2=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r2})
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

[ 3075.510375][ T4422] input: syz1 as /devices/virtual/input/input289
05:44:06 executing program 0:
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000740))

05:44:06 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3075.555237][ T4432] input: syz1 as /devices/virtual/input/input290
05:44:06 executing program 0:
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000740))

05:44:06 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
ioctl$TCFLSH(r0, 0x540b, 0x9)
r1 = socket(0x1e, 0x806, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)

05:44:06 executing program 0:
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000740))

05:44:06 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40000, 0x0)

05:44:06 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x1000000000000000, 0x8000000000000, 0x3, {}, {0x0, 0xfffffffffffffffd}, @rumble={0x6, 0x8}})

[ 3075.839807][ T4448] input: syz1 as /devices/virtual/input/input291
05:44:06 executing program 4:
r0 = socket(0x1e, 0x6, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = getgid()
stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
bind$bt_rfcomm(r0, &(0x7f00000007c0)={0x1f, {0x0, 0x400, 0x7, 0xfff, 0x228, 0xadd}, 0x1}, 0xa)
r4 = getuid()
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000600)={0x0, <r5=>0x0}, &(0x7f0000000640)=0xc)
syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000180)="f5dd34d37b3b7d70397cc598ffa5134bf18e14defe75ec32114b4e9ab8e2085418457c8144f1869ac2ee48afc4960fa6d9f6bbc7ede6f58c0de8f9cc203c4d1f924db38db4527ee1896008854e7ab242b514b18e1d24a959ace78533183ea9a6dacd2339096024c7d80b89204ddc09fdee7052572f24abeaadc6abcda1653b5ad9a61ee467a4beac13748bed101db8678fec53c5a9c19480ded6596504de99dc6000aa3a94f9bc611b1355e9157a7b30c5c3740b3e5d3898cc9a4f92f0a10c6f26dd997dd80c55c9d852eb0a7a70348eda15a14d43363df1e0", 0xd9, 0x5da}, {&(0x7f0000000280)="de7438b297aee910841422f0228d91bcf1501435dd100dbde30d2d6d9018380f47e9e4909c61684140a9de8b7d3764d39cf512766e942618599e55b354a5b5d7dfa3aa48d523e2a3fb5e68ef749b640ca6cd51192cf7c26ad0a04435a594c97bed737a497b857b93f999f939cae508eff933f52d4e4670e61427e78357913f03a9ff1627753014b557bfde5614f891117a3d4a909c1ec7efa35a30e58854911018447e040c2af421780478b09dd9622e05b4d3b145955c08616392a2918ebf", 0xbf, 0x3}, {&(0x7f00000000c0)="e7a75c1f3507d32abaceef5862e1cd7b3dd3e9260c241e56aac0de33ea7111c7a073914db62c51b056a1a2b63368f657bc807f3216741b97e0e714e1330d7bb16a6a11dd3d151a32a4e4c510898c3ad137cc8592a2d42005a8609d", 0x5b, 0x4}, {&(0x7f0000000340)="e41a4a2955ba7d763e4d536a0ac0701d451493cff9816215922c25169d30ecf2906e26cc095572ced49e3976e1e6a7e4419252f20407a69745fa1f1919bef696c5dd2f7bdfc2687119e64efcb9e03ba21c8defd32fa719db6b34b06667ca0b09e6b93a3275", 0x65, 0x1f}, {&(0x7f00000003c0)="7fae6d3ac7326f597413556bc3e4538b6677b33a6ad7bf7e0f58feff3a0a12f524c042b4529743ea8cf0e25733b43aa69de156dc16d458a53f4d2a83364f2bc6e01bc09ac9dbe1a14ef3d8507d29bad8055d20c62f0a128ea801f003dfd41fd7736e14f7891106f8ce3a094675e07b6ae3a9919dea7e0307eaa590d575b3eb520acf6ff07719761bdcde78becdeaa84e2720e1000ed299e37ab39ffbf7c3c9ae8913568627ba4f3353fa4e4aa21c425dab7b98b64822aa0f23b058c96a17f724b0", 0xc1, 0x80e}], 0x4, &(0x7f0000000680)={[{@noquota='noquota'}, {@gid={'gid', 0x3d, r2}}, {@nointegrity='nointegrity'}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@discard='discard'}, {@discard='discard'}, {@resize_size={'resize', 0x3d, 0xfffffffffffffff8}}], [{@smackfsroot={'smackfsroot'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':eth1em0\\+self'}}, {@obj_type={'obj_type', 0x3d, '.loppp1\'/\'wlan0cpusetGPL'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@appraise='appraise'}, {@uid_gt={'uid>', r3}}, {@dont_measure='dont_measure'}, {@euid_eq={'euid', 0x3d, r4}}, {@euid_lt={'euid<', r5}}]})

[ 3075.885625][ T4453] input: syz1 as /devices/virtual/input/input292
05:44:07 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa000)

05:44:07 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:07 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:44:07 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x806, 0x2)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=<r2=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, <r3=>0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000180)='vmnet1em0wlan1\\@&\\\x00', 0xffffffffffffffff}, 0x30)
perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x6, 0x5, 0x7e0000000, 0x0, 0x0, 0x6, 0x4000, 0x8, 0x7fff, 0x9, 0x0, 0x8, 0x3, 0xeb, 0x7, 0x3, 0x4, 0xffffffffffff5f1f, 0x3, 0x7fffffff, 0x11538aea, 0xfffffffffffffff9, 0x7, 0xffffffffffffffea, 0x1ff, 0x1, 0x400, 0x1a475a57, 0x2, 0x7ff, 0x5, 0x4, 0x4, 0x53e4, 0xfffffffffffffff7, 0x1, 0x0, 0x0, 0x6, @perf_config_ext={0x4}, 0x800, 0x2, 0x9d04, 0x0, 0x3, 0xff}, r2, 0x3, r3, 0x2)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000240)=0x1000020000000000, 0x1)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:07 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
process_vm_writev(0x0, &(0x7f0000000040), 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/203, 0xcb}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000002c0)=""/133, 0x85}, {&(0x7f00000000c0)=""/12, 0xc}], 0x5, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:07 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x300)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:07 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:07 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
futex(&(0x7f00000000c0)=0x1, 0x9, 0x0, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180), 0x1)
r1 = socket(0x1e, 0x805, 0x101)
getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000000)=""/2, &(0x7f0000000080)=0x2)
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000240)=0x44)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@un=@file={0x0, './file0\x00'}, 0x699, 0x0}, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x8, 0x101040)
membarrier(0x4, 0x0)
r3 = getpid()
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000002c0)={[], 0xac95, 0x0, 0x401, 0x40, 0xfffffffffffffc01, r3})

[ 3076.453098][ T4473] input: syz1 as /devices/virtual/input/input293
05:44:07 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:07 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000440)=ANY=[@ANYRES32=<r2=>0x0, @ANYBLOB="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"], &(0x7f0000000240)=0x98)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={r2, 0x7}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={<r3=>0x0, 0x10000}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={r3, 0x9, 0x2}, 0x8)
r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:07 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x22)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1, {0x0, 0x989680}, 0x0, 0xb971})
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:07 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10, 0x80000)
sendto$inet(r2, &(0x7f00000001c0)="9074cf842f92bca3017aa369aebdc35fac17eed81ce48926784bd539cbed8141b703e9258c394a6137df22ddb066416f523d316ce4c50a8560e7bdc213ae57736515a92d776f14823409d15958ba40da96325781ebad8149f947a6179b258ec104f9ba77fb46949bb957c2a2e6a19afac7906878fb5deaa251731950049530ed2e83b1a1f62c5428dfa7310ecfdafd7ab93bbd43ba272863df6b257b3a4a34cafc2a1729fe7c7d2ee07a8a3f5b7cfa877fa9", 0xb2, 0x4000011, &(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0xc3b9, 0x2, 0x20, 0x20, 0x3ff, 0x2, 0x6, 0x5b, 0x72, 0x40, 0x37c, 0x1, 0x8, 0x38, 0x1, 0x40, 0x1}, [{0x0, 0x6, 0x7, 0x10000, 0x1a2, 0x4a5cf62b, 0xfff}], "6e7295435c23c9eaf7f1472f67551c34893d08491e46ec355501108c9f1f34f052824cee3c925bc08aca985d269421c74f3498618e95b7bf5a4f2b0f5ef6d9fc5527ab1113d7d3e0ae371d1a73e2cef9aa5454dfe97c57b1be86ea2a23dda44e36a32ceaeecd848d7b28d0c8749c2f4ec0af61bdefd9fbfaa4d93557439ea2927b1e4142a84d4298238bb026f89a0e9c0ae4a814abb496", [[], [], [], [], [], []]}, 0x70f)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

[ 3076.731616][ T4496] input: syz1 as /devices/virtual/input/input295
[ 3076.776501][ T4500] input: syz1 as /devices/virtual/input/input296
05:44:08 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa001)

05:44:08 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, 0x0, 0x0)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:08 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
socket$inet(0x2, 0xa, 0x7)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}})
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x100, 0x1d4, 0x10001, 0x100000000, 0xfa46, 0x1, 0x6}, 0xc)

05:44:08 executing program 5:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4)
bind$x25(r0, &(0x7f0000000080)={0x9, @null='               \x00'}, 0x12)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:08 executing program 3:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:44:08 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x101d0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3077.420995][ T4511] input: syz1 as /devices/virtual/input/input297
05:44:08 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, 0x0, 0x0)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

[ 3077.470902][ T4524] input: syz1 as /devices/virtual/input/input298
05:44:08 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x40000)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:08 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x1c)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x10226)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:08 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, 0x0, 0x0)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:08 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:08 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x2ab, 0xfa00, {r1}}, 0xfffffe2f)

[ 3077.766469][ T4542] input: syz1 as /devices/virtual/input/input299
[ 3077.809536][ T4547] input: syz1 as /devices/virtual/input/input300
05:44:09 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa100)

05:44:09 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x9, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={<r2=>0xffffffffffffffff}, 0x113, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000540)={0xb, 0x10, 0xfa00, {&(0x7f0000000480), r2, 0x3}}, 0x18)
r3 = socket(0x10000001e, 0x805, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r4 = getpgid(0x0)
syz_open_procfs(r4, &(0x7f00000000c0)='net/snmp6\x00')
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00')
r6 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f00000002c0)={0x1}, 0x4)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=<r7=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000180)={{0x2, 0x0, 0xfffffffffffffffd, 0x7f, '\x00', 0x4}, 0x4, 0x20000240, 0x80000000, r7, 0x3, 0x5, 'syz1\x00', &(0x7f00000003c0)=['proc\x00', '\x00\xc1\xac\x89~W6fdL\xed\n\x10U\x05N\xf1\x89\x00\xe5\xc1=;\x98S-J\x8f\xb5w\xa8`1\x9fV\xb6\xcdpj\xaa\x1e\xfbs\x7fA\x8bS>\xf7\x87l,\xbey\xd87 $\x97\xca\x02\x12\xbaFMO\xc7\xb2<\x7f~\xf4T5s\xba\xea5\xd6N\'\xd5\x10!\xd1\xb8\xa5\xb105@\'?\xc2\xcd\x1fI\xfb\x81\x171\xd2\x8d*\"\xf1O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', '\x00'], 0x89, [], [0x5, 0x4, 0x4c6]})

05:44:09 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:09 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001700), 0x3}}], 0x40000e5, 0x0)

05:44:09 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:09 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:09 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x280, 0x0)
lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='user.syz\x00')
ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000080)={0x2, {0x9, 0x80000001, 0x6, 0x9}})

[ 3078.369610][ T4556] input: syz1 as /devices/virtual/input/input301
[ 3078.401195][ T4561] input: syz1 as /devices/virtual/input/input302
05:44:09 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x1000000)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:09 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x20400, 0x0)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x5, &(0x7f00000000c0)=0x4)
ioctl$KDSETLED(r1, 0x4b32, 0x8)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={<r2=>r0})
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000180)={0x1, [0x6]}, &(0x7f0000000340)=0x6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={<r3=>0xffffffffffffffff, r1, 0x0, 0xc, &(0x7f00000001c0)='/dev/uinput\x00'}, 0x30)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x81, 0x0, 0xffffffff, 0x100000000, 0x7fff, r3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x1800000000000081, 0x4000)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="090000000200e6e3030007000000ff0f132d000000006639ae15b7a126e04d1515f4b0448f2f658c09fe6686d26ab1469602aa0004ee09000000000000007f58f991cf07b3fe42169cd89ae498814f40aa68405323"], 0x16)

05:44:09 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:09 executing program 4:
r0 = socket(0xa, 0x2, 0xffffffffffffffff)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3078.725185][ T4579] input: syz1 as /devices/virtual/input/input303
05:44:09 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

[ 3078.881476][ T4579] input: syz1 as /devices/virtual/input/input304
05:44:10 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa101)

05:44:10 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)

05:44:10 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x3000000)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:10 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001700), 0x3}}], 0x40000e5, 0x0)

05:44:10 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x8002000000000, 0xfff}, 'syz0\x00', 0x4c})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
timer_create(0x4, &(0x7f0000000040)={0x0, 0x41, 0x2}, &(0x7f0000000080)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f00000000c0), &(0x7f00000001c0))

[ 3079.345090][ T4599] input: syz0 as /devices/virtual/input/input305
05:44:10 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x2, 0x200, 0x7, 0x7}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:10 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001700), 0x3}}], 0x40000e5, 0x0)

05:44:10 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c)
getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:10 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0)
ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000080)=[0xa8, 0x8])
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:10 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x20, 0x805, 0x8)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3079.612839][ T4619] input: syz1 as /devices/virtual/input/input307
[ 3079.640077][ T4619] input: syz1 as /devices/virtual/input/input308
05:44:10 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:10 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:11 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa200)

05:44:11 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf32(r2, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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"}, 0x209)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @broadcast}, {}, 0x8, {0x2, 0x4e21}, 'ifb0\x00'})
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:11 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
creat(&(0x7f0000000040)='./file0\x00', 0x108)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x9, 0x3)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:11 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, {0xb211}}, 0x8)
listen(r0, 0x0)

05:44:11 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000740))

05:44:11 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0xd0010100)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:11 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000740))

[ 3080.308135][ T4640] input: syz1 as /devices/virtual/input/input309
05:44:11 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, {0xb211}}, 0x8)
listen(r0, 0x0)

[ 3080.349404][ T4640] input: syz1 as /devices/virtual/input/input310
05:44:11 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0xffffff7f)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:11 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000740))

05:44:11 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d9e29c3f6ce3ca2e61143c26004f0a8372ce5d17025f1e7baf2d2f4b9f0725fb841dd1838d8f364089a8b13e7f3ae263f6822100", "3f40a309f98ebe6436be3656ec76dce88691c73ce75cbf04d29c921f7cc62d966e058c6a1e95b6a930850cc5a8b9a7adeef62f71b2d8482158c34b434680d327", "9fa8997e39c89bb302be51bb286921ba0400000000000000187400"})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{0x7fffffff, 0x0, 0x40, 0xfffffffffffffffd}, 'syz1\x00', 0x3})
r2 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x3, 0x2)
ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000015c0)={0x4, 0x0, &(0x7f0000000500)="4bc792eada6112f8c263704d20c32bfb2794cdafabcec4a4c53a6555c57ebed7a908591012a2ecce2913bc28df6566ec739d70363990c27b6ffa4c97fb4105d2229598a7cc36d379a487b0bfe1fac8e0ebbea21709dc14e2d7d41ef51b763c0694df86bdcec9e3c4cfa3a4f860f4388e03777a7d5c369ecf98815f0959ceaae386cc53158d476268fe941c7338981769e302b18a506fd9c2eaf9ffeb9b604ce61bfe8688b63cd61aadd34fadc2a9395758b55bffde7ad83581e93e9673004e7258a474ba883b41f0ae2374cba12f9c521281bb15a7259c5ebfca427d20a096283902a5eb3e8572c16fd002b4df10afb6e72cccc8524440c9779d69759e4308d80e38d461816b11ac6d8ab15ebf12d1e002feb911515804b8fca70e8fd9478c295f9175bebf67fb61e360dedfea6af1d5a3c31280b637deb14f93060ec22dd2741821e37b7dc64c4abc80e05a059fafe9ca42a101ad29975ca102bf4e02b0324d0038b7d33f2360cb178c4d122d0fc01d24f06903fec44988926698503fd9df975b2dd2647137bb94878e6b7cdc785f6278b44628c665609d2caf3edf61a2aaca5d75238c4f324aab6d011bbc158a4ca031ad73a761910d06629e65c1c6d9a68dcb81c2ba8d21df6ca4db7ebb14fbf6e0860a93d8c0a3b5c520069adcde476c142c1d21a9c6b2b43cdba786d3499a75304057ae22d019172ca35ac3c0d9e21e3c0e9199576f4ba6024adb3c1c35166b0f3338c40cd0a1cb694de6ad483dc57f7fbb6b4dd94a27f66efce7aa8091e4388c8e18d729cd9585528786864dc88175d2a63a3c7da402fc2c9162e9c66999da22649b00eb3daf567ab97e7535c9d0f2fab05d2d7b62c0215abf1250e0112eab5ae2cee762a104c725057ce21390ebe66a257e007ba5ea93739c4e8e78b6a5c55235cc630bf534b32a8ed32666bde24a81f8115b135f99df0525dc6e20d929829688ff8c2d696315217f8cf636335290e080b86a42704455dcaa0696c6b5fe68a90545ff1ef12cf177ed03e5d789bedf7cacda1f211f230bb45a3c79d375f6b15017dea77218a0759e36da9222349581902fc7e0655fa633c400f2078669123a76f16a9078d1478127ec8871af1d8388c4b3a8f24c4712927a8dc2b14f78d91891007681f4fee786b5393e65ca21270c718e330416af4056f4238a3b665e78375dfe72038ec1e4cb74c9fad7870a7272e85a39fc82564f5cc4056bdc35489bb0f4f96a6e7ed467781d02cea22a289e580beb588ca7ca9d65ab86e35bcc7e81c1892d37feb7b2849ce307a25d50a68819de741847e1d1417e70aa6e2e2b066ccb14c49912093cf7f68108e52b71d00c7782ce40d2cc51ca2e2caecd9e2446f36fb5d1e9bb6907b9cce7434257d59f9496c3d6d7aa7056acc078055880c24fe9215830f303e6877fc13763981cdb751fc00fc53a6af6a4624be3a05197a8ad8036b23da36e41f66cad956265b3cd5f10a005f8b3241e99b0b325036a4385ab13630fcf4780b3f0fdd7b281289e9097e5ee44ae221f48a7b223615cc012ae6596584dc93d56d52fc66cf94ee74a14497cb546ee97c972da68e7165006170d9d7681a6211f46cd2322b8a9aab3b31afbc71a6b604643b8a6cbd67405ac4f330e602ae624c382593d4ff0ed310d30244df35467c469b5a3baafb12d46f069c6ea80aa7e797404859028bc37ee20a4f8fbf8677c71f11575c95d51b59358c53d9f7c675951b6a374d018f033a990e02e102c5d9433d26560549a2d6836d1ba0d7b65e7cb8f3ae29fa409d74e4c2bbf3ea49a6b19698c06627f6684e714d2b9f504f8b5490e5168d459ba84cb6f9688cafa3d61b66aa8e5de864b49579cf92b69cbc8b9a64af7d2164a8a27a129e842cd448a9010eaef699fd7fbb132effafc138649350522569437e81c51593cefe24644e6278714aaa2b57c638a6cec566db42783f3a7b07f0f9bba5b8fd49ec1b63490263b354e146c8ddfb59d466b5c022bf413591be1e13b42a02c800fb36a77715a1bd2b91a28da3199934413776d748e9d855152dac7f8778886247a271e7874385c6905b875f65ad4edecc2a3ca55ed93abed60e6df6feadc427b54843583eddbf88753b1dd5e6e1136c47617045d5eb0d1b68bcc328a18e5f07e340b9322609595435be4d71bb4e1227982bd7a57c5aa70ae2fb37c95435a75e78ccc3f4389027b7b8389e11eb99f88e732980dbacebe69f332a02612ec9853338c9af3cfcbfe628b8f7df46829c20a022dfaaaaa92b766e2c103edd5f01f983315ca0bd572324758fa408d4c399a34fff1abd3978fc67b99642a82ec982229f9edd2a023cdc4c888eb5bd59da94b6d81923fe2476148f4350a7ccec75c8bb7681e6e0aed9910e358083d0129e2f5c48eddcfc519dc07b2689cf770fd0af7068d93fac281bd0b52cb40eaa43ad2df709c75803f2b15eaba038a24fe431a7d8d97977556e550b5ae174da6299815b5b3b78100d469914e06deac1733369bbd0223f5844729ab5204387af581d544c8961dc425755a0de14013bdd0e85cacdc9e5a68a2627352be12ec2021c9f25fa1ac2b7ae5927ce20669d5cc3a2d56eed28fbc90c3793ccafb1bfe260505876787c5bc6a5e55014a30e62d1ac95f940c339a594f59b9e84f2c22804c4e0a505456a37f48e78400da6ae790674ca962a6f31eff6f88339e91cd2832040d0f6173e46b8196e6fe0aef957d6ed3e32debe833730fab7b81b08cecd80420f9e66e9f583de957196b1e74e346e87b5fd13812ff471ecaccb20b5ec22e3a7d4699257a6d82737ae96876a840fef97cbffa3ff42e6f443a373673bc3c25ef519e918c22d01bd303f37882d9640ec9f92ee16c394236c26aec7745c4ac21bff9d4f165d02f02159b62f8d6c630a3571342edf85dcaec1145e39de9936a4a45cb33c7433099c960fd32f74f07feab72d30091b3cfa21c00b0b0688058da8dbc87a9999b68249606d39420d7ed9cb2a7ca588f1e6c5705f9c8fd81b697df734111f1e414762eac1c16cab07f93c0db5233c8e44dabca3d304c872a0d0256e56b1a496a63012fdb50987d43025cfbc05ad22a20fbf9c618f71c89b5c90851210debc84b57aef336a10955261467f3ce9a080dced68d378c52b462efdd50bb3b402909ab0bd346ff39c99e6441d2d95b9364ff333248a3676f451a0d363b71c9ea54525da38b62af02831d7e98bbb072306c2066ed17d93839420de11293bcbc1706fa58c461fdd113922f05544d7615bdb769d2fb5cd6bd95105de4b5e119fce341b77cc0d8cd666192850eb3d44d6dd56ac976e1c1be3061d554174804b515f919fd99a76982599e01841aface5eb939d3bbe034596a488c8a1abecb29f1d42d9c4c2ed3e60275ca1e3d588e97d7f33012fa4e91f1148914be793d033ea5acfc74fcba43ef57f5b816de040d136c2bb1a5479f583690eb6b1411b90efe78fae760d8b18783bf828255718b00faee7f3cd64b5d588a484c85fbc33d75418a731be8125e222c31b7d43a3863c947384ba28cd36b52fff1466ec1fd3cf60ffa0c60a17460a617b325fd564424fdccb9df9dcd823d45d7ff715b7d05cd0b8494b49229528e054654c38f52ae2b55f5d9a53876d8336ac3a91b9be0443a63167cb09204508f4c69de4a377f79d48df6df1378a23bf671ee4711a199c9f8caeffa3dbe73fb5698b2dc9233544ed6f1ad137e0f27fb69d2e99f44c38a79cadea7ef1eb20ec420b0645b80e3ef83f084fccd48e76f8a448c9ed314bbaebc27ebf9e21dbe64d93e7f2aba748647b6c84501e9187ffc05b089e60b57a5697e5f5de8a128b35b3fe2077dcc96be0034e8a7aab01fc540eff61ddf89b94b80d62722e06e30912dbb5fd3863664634fac42d0351ddda6e3cc6009ec6a62045c644666202da366ebf6366d82da42deeb050099f2d055de8ac1705a6c2fab41870c0e2d4eeec6ca6519d9ec390da07bb0a31935fe532ebca0f7291b3dd2a677f2428b7c10301ace4122e406b1c2e2e53a45850d3d720f15923783d7f0d04e8f528cb010febfc967ca00de82d39e4995bf1761b37b612aaadfdae96d72ea15d54136606aad692a850980bfcbcfbbb3d6f28fcd1754bcadd51ce1c07d8721f19041d439d29df8b08a9eec4a1d590535a640bc6ffc3966b78888dabbff3d5b1b4adb5fffcdfa17e3317c95ac190b3fa9582a83792dbba2dbfc6e3b743b71c55921d9be0012987fddbc116ec2dd205554d788d865bff9d39f428b7c4c50e7104b23dc8daf8176e21951a39e104f61e22378e261725ad24cde49ad8a4f6cfe6d4556f0a513fe11ecb7b5b73c48f319efb200b2120c081bcd2a9d16c271633585939b3fee195ac0716e16cffe1a554df5a6e1b0550cd3b45cd3a7a1ac75e3f8f731a4e2773b950749d2b189f3dd9a8a15cda4d4778a7cc9dd5c97ea0846b58145f9c69a8d23e6482ff453fd6ddf30c1367a68836c8b564452a1a15e3deb8274eb56931a2df3e393054fb126ab2e295cd159710a16612fb1b07153c5955d38646ba7ce6f39875ef677252b84de736ddbcf8f7099b150ace079260b2de66896b8500334d2f562201dd955eac18fecd897f1a949a4ca43fcdfe1664c4656fa61b034110294b0c45ea11792031bc9fb770b5c9793d9a5d2b16b8e6216575328f65bb8888df741be5afbfbff39888f92cc39952c468bd84dbeae31b1f8a4ae5a287cd23a33d7da34ec764b5f58597596f89a99e9e34882bf4f779d1852e3300806c0aff90245f6bb2c0057c2be9ed81af7bd3bd61da9e3102d655d285d72f94d4aca365754b0e2a4d86a90a8c2b0c4f57fc321c0aa6ab3c2223976ec944b26891d0268ae6cab0ee99c865e21e3c342449c4557d091d8a03b3156a31be1e8a9831ef9aa61abfeba2660ef7b183c53a41730d6ad0066e6d0ed02c0212104056e4ce657f1a4d0a6f91cfe150bfe308becb138516b27f5c39f0cb7ddcbaf71cb810c73fa8882eb1ddd9ce1f48f6b053990735466e5db52be03acfdc4599f1bddd6c938d227a772f3d872cdc84ec0dfac036d34350511b311706f79fcd7f86d75fccb039292b605048bebe53d8bedc267678b7a7dd0aac30c3d992ec0158debd4a6c67e08e6bdc670f703353191efbbf1f37f69e9e427dc63b8508d78dfa17049ed4418650391c6c3bce122191d12e099bbed67397c360a66bdeac0a6952ebe8521282a0557bdff99830e8393a88dbc93657cd612a9495ec1b7e29df95905c29038253c9377fbb3081435427a2854a5d4c6430d34c74f35238836f03d4c120344995a9875d0749bf409b63532b4741f72e59e0e1cd15a283d324f6050b7ac5d6e766f2623a8ff4223b783a0bd2c7cd51dfaab684553f98c017f0d4d9266e3319b96c8d7c00db34a8b4662a375ea8423f95044a5086198402444845246ef59edc5149a25843839e3a873908d5352c1b9fc61d562f53bdc5bcf4788cbc7a4d8331962c83baf8ed33e73d09b3b455218a9b5cf1dd2da9f7a966b43a86ec394a7460f19eadb2271711e1e22134c8978192affdbba7dad91491d9f107b8f54cb15b78ef3e36a3a74af0ee49baa600c05ed87341b1ac3c4ef3a058158d28620acfa70ec9b6c3d850bab8f557ce3e2f5bc18a49aaa30e3776a94a49619419aa0a385c79f22100d438c1b0018c760a181e60ec3c739181dba367bde4eb72bf0ac1f48c046fb02a076ca3e053626ced6bf719a709fb212b57df439d8e25ee8d943d80d657ea019a512a6fef74628dffcc9aba236d5", &(0x7f0000001500)="85c174991b784823c497ee8a9146369b97ad323f3a40429a5d4520e4d9774ceb91ac2efd83b42a6e5902c38d3b09d5cfea7727f9396b297d5b33a911c38cb62e218ae0914220ce6094e46df5807e08f0fa82116e6fdd1071bc8373534a7c4e20e03425838f8e9b102481e68e26cade4d1064974ea88af6b81a418e7c1f1a6e613be437bb4b7ec96a7699f1c12dfb9a22a981b5abfd848d04171068ec646c05", 0x1000, 0x9f})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x8}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008040)
setsockopt$inet6_int(r2, 0x29, 0xde, &(0x7f00000000c0)=0x7, 0x4)
r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @rumble={0xa1, 0xfff}})

05:44:11 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, {0xb211}}, 0x8)
listen(r0, 0x0)

[ 3080.595929][ T4667] input: syz1 as /devices/virtual/input/input311
[ 3080.672623][ T4672] input: syz1 as /devices/virtual/input/input312
05:44:12 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa201)

05:44:12 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x4000000000000)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:12 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, 0x0)

05:44:12 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, {0xb211}}, 0x8)
listen(r0, 0x0)

05:44:12 executing program 4:
r0 = socket(0xa, 0x2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x4)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'teql0\x00', {0x2, 0x4e21, @local}})
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000080)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x432, 0x0}, 0x0)

05:44:12 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x1000080000000}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:12 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, 0x0)

05:44:12 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x0)

[ 3081.275870][ T4680] input: syz1 as /devices/virtual/input/input313
05:44:12 executing program 4:
r0 = socket(0x16, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00')
r2 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x16000)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x50, r1, 0x310, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8055}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x48000)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
prctl$PR_SET_TIMERSLACK(0x1d, 0x5)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000007c0)=@add_del={0x2, &(0x7f0000000080)='erspan0\x00'})
r3 = socket(0x1e, 0x805, 0x0)
ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x2)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@loopback, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000300)=0xe8)
r4 = getpgrp(0xffffffffffffffff)
r5 = syz_open_procfs(r4, &(0x7f0000000380)='net/ip6_mr_vif\x00')
ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f00000003c0)={"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"})
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3081.325832][ T4688] input: syz1 as /devices/virtual/input/input314
05:44:12 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x0)

05:44:12 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, 0x0)

05:44:12 executing program 4:
prctl$PR_MCE_KILL(0x21, 0x0, 0x1)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:13 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x0)

05:44:13 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:13 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000740))

05:44:13 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa300)

05:44:13 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x100000000000000)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:13 executing program 4:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x200000, 0x0)
r1 = eventfd2(0xeb3c, 0x800)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid_for_children\x00')
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6(0xa, 0x806, 0x4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setstatus(r1, 0x4, 0x400)
r6 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x3, 0x101000)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x1, 0xd344, 0x6, 0x0, 0x0, [{r1, 0x0, 0x200}, {r2, 0x0, 0x5}, {r3, 0x0, 0x101}, {r4, 0x0, 0x100000000}, {r5, 0x0, 0x1}, {r6, 0x0, 0xffff}]})
r7 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7ff, 0x7, 0x653402ca, 0x7}, 0x2ba)
socket(0x1c, 0x804, 0x0)
sendmsg(r7, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000004c0)=0xffffffffffffffff, 0x4)
timerfd_create(0x0, 0x800)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000080)={{0xfff, 0xa1}, 0x1, 0x8, 0xffffffffffffffff, {0x40, 0xffffffffffff8001}, 0x106, 0x3})
r9 = request_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0xfffffffffffffffa)
r10 = add_key(&(0x7f0000000240)='ceph\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="2334da905a4d8659e2b492d1e330c2c5e07f18ebcb2a30e63258383d95cdea18b74c4e0e010e365f", 0x58c8b8d6, 0xfffffffffffffffe)
keyctl$instantiate(0xc, r9, &(0x7f0000000200)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', '/dev/ubi_ctrl\x00'}, 0x24, r10)

05:44:13 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000740))

[ 3082.253978][ T4717] input: syz1 as /devices/virtual/input/input315
05:44:13 executing program 3:
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0xb211}}, 0x8)
listen(0xffffffffffffffff, 0x0)

05:44:13 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x300000000000000)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:13 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000740))

05:44:13 executing program 3:
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0xb211}}, 0x8)
listen(0xffffffffffffffff, 0x0)

05:44:13 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sched_setaffinity(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x94b, 0x4)
fcntl$setstatus(r2, 0x4, 0x42000)
ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000140)={{0x3, @name="c449b0f6f135d4e2369e83ff1591a65f4ef93556f697d6a6d4b69cea1d5bc5cc"}, 0x8, 0x8001, 0x1})
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x40004e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0xa000, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082)
syz_open_dev$mice(0x0, 0x0, 0x1)
r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r3, r4, &(0x7f00000ddff8), 0x102000002)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:13 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000040)={0x7, 0x5})
ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x0, 0x9, 0x4}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:13 executing program 3:
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0xb211}}, 0x8)
listen(0xffffffffffffffff, 0x0)

[ 3082.680530][ T4758] input: syz1 as /devices/virtual/input/input317
[ 3082.710621][ T4758] input: syz1 as /devices/virtual/input/input318
05:44:14 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa301)

05:44:14 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

05:44:14 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0xb211}}, 0x8)
listen(r0, 0x0)

05:44:14 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:14 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendto$inet6(r1, &(0x7f0000000080)="5060c73dfeebb5ec3916d66c956663cb78dd4cf4bd7d4f5765bf054f64e2ffe5fc287fa5783b455e389c53850281fce7cf890669bd6e7af1c342d5d6319d834b9ef1c1e5da9f5291090fa0f68db5e4034a4c70e6a15e476e321b0b47799d482c8d791b7dee6a9625354dff96628f2cedd705146c2abe50fc02aca36c2582d9b1e262602d6f495d5562a5c616fdf1e61acef4da745abe77d1704716a7523ec3a0c9ae2f950a38cdb2d7a9d7223d", 0xad, 0x40000, &(0x7f0000000180)={0xa, 0x4e22, 0xd04, @mcast1, 0x9}, 0x1c)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0xe20, 0x4)

05:44:14 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)

[ 3083.220473][ T4770] input: syz1 as /devices/virtual/input/input319
[ 3083.248139][ T4774] input: syz1 as /devices/virtual/input/input320
05:44:14 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0xd001010000000000)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:14 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0xb211}}, 0x8)
listen(r0, 0x0)

05:44:14 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:14 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x0)

05:44:14 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xbca9, 0x40)
getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={@rand_addr, @loopback, <r2=>0x0}, &(0x7f00000000c0)=0xc)
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000140)=r2)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000180)={0x3, 0x3})
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:14 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0xb211}}, 0x8)
listen(r0, 0x0)

[ 3083.539402][ T4789] input: syz1 as /devices/virtual/input/input321
[ 3083.564088][ T4793] input: syz1 as /devices/virtual/input/input322
05:44:15 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa400)

05:44:15 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfffffffffffffe7e)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
accept4$nfc_llcp(r1, 0x0, &(0x7f0000000000), 0x80800)

05:44:15 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, 0x0, 0x0)
listen(r0, 0x0)

05:44:15 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x0)

05:44:15 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffb, 0x20400)
write$P9_RSTAT(r2, &(0x7f0000000080)={0x59, 0x7d, 0x2, {0x0, 0x52, 0x81, 0x1, {0x2, 0x0, 0x4}, 0x0, 0x100, 0x64ef, 0x7, 0x8, 'vmnet1}-', 0xf, '^vboxnet1cpuset', 0x0, '', 0x8, 'vboxnet0'}}, 0x59)

05:44:15 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, 0x0, 0x0)
listen(r0, 0x0)

05:44:15 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0xffffff7f00000000)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:15 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x0)

[ 3084.263626][ T4802] input: syz1 as /devices/virtual/input/input323
[ 3084.296796][ T4807] input: syz1 as /devices/virtual/input/input324
05:44:15 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xdac01a17260e541f)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:15 executing program 0:
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)

05:44:15 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, 0x0, 0x0)
listen(r0, 0x0)

05:44:15 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x0, 0x0, 0x80000000}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7f, 0x200)
openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2001, 0x0)
ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000080)={0x2})
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3084.569621][ T4826] input: syz1 as /devices/virtual/input/input325
[ 3084.581256][ T4827] input: syz1 as /devices/virtual/input/input326
05:44:16 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa401)

05:44:16 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x98a0faff44bbc4a6, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
fcntl$getownex(r0, 0x10, &(0x7f0000000340)={0x0, <r2=>0x0})
sched_setparam(r2, &(0x7f0000000380)=0xa1)
r3 = socket(0x1e, 0x805, 0x0)
getpeername$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000180)=0x14)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={<r5=>0x0, 0x7}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0x3f, 0x1000, 0x8, 0x5, 0x401, 0x80000000, 0x2, 0xc5c, r5}, 0x20)
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x18, r4, 0x1, 0x3, 0x6, @random="834dbf7847e9"}, 0x14)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={<r6=>0x0, 0x7}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={r6, 0x4}, &(0x7f0000000240)=0x8)

05:44:16 executing program 0:
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)

05:44:16 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)

05:44:16 executing program 5:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff})
r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2)
fanotify_mark(r1, 0x1, 0x40000001, r2, &(0x7f00000000c0)='./file0\x00')
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:16 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x4, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:16 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)

[ 3085.285483][ T4835] input: syz1 as /devices/virtual/input/input327
05:44:16 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$sndseq(r1, &(0x7f0000000180)=[{0x5, 0x77, 0x8, 0x10000, @tick, {0x800}, {0x9, 0x7f}, @note={0x10001, 0x97, 0x5, 0xdd0e, 0x5}}, {0xffff, 0x1, 0x0, 0x7e0f, @time={0x0, 0x1c9c380}, {0x7, 0x401}, {0x2, 0x400}, @raw8={"48e78d8fd2858814f4a87647"}}, {0xfffffffffffffffb, 0x20, 0x6, 0x1, @time={0x77359400}, {0x2, 0x8}, {0x32e701b5, 0x9}, @quote={{0x629, 0x3f}, 0x4, &(0x7f0000000080)={0x101, 0x7, 0x8, 0x28, @tick=0x401, {0x100000000, 0x9}, {0x7, 0x10000}, @addr={0x3, 0x3}}}}, {0x4, 0x401, 0x0, 0x74, @time={0x0, 0x989680}, {0xa, 0x6}, {0x4000000, 0x7}, @addr={0xfff, 0x7}}, {0x24, 0xf9, 0x2, 0x80000000, @tick=0x4, {0x7, 0x8001}, {0x0, 0x4}, @queue={0x6, {0x81, 0x6b}}}, {0x4, 0x5cc, 0x5, 0x5, @tick=0xc7b7, {0x20, 0x3be6}, {0x2, 0x2}, @raw8={"1cce68f5ef4084822ab77dd5"}}, {0xf9aa, 0x81, 0x26, 0x81b, @time={0x0, 0x989680}, {0x9, 0x3}, {0x81, 0x2}, @result={0x5, 0x80000001}}, {0x0, 0x3, 0x233b, 0x2, @tick=0x6, {0x7, 0x400000000000000}, {0x8, 0x6}, @connect={{0x9, 0xfc3000000000}, {0x1, 0x7}}}, {0x7fff, 0x9, 0x0, 0x4, @time={0x0, 0x989680}, {0x800, 0x3}, {0x500000, 0x7}, @result={0x3ff}}], 0x1b0)
r3 = socket(0x1e, 0x805, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0, 0x8, 0x800, 0x6}]}, 0x10)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:16 executing program 0:
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)

05:44:16 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x3)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000, 0x38)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8440000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=@getsa={0xd4, 0x12, 0x200, 0x70bd2d, 0x25dfdbfe, {@in=@dev={0xac, 0x14, 0x14, 0x25}, 0x4d4, 0xa, 0x33}, [@policy={0xac, 0x7, {{@in6=@mcast1, @in6=@remote, 0x4e21, 0x9ab1, 0x4e21, 0x4, 0xa, 0x80, 0x80, 0x3c, r3, r4}, {0x40, 0xb33, 0x2, 0x4, 0x100000001, 0x8, 0x7fffffff, 0x9}, {0x8000, 0x3, 0x6, 0x3}, 0x4, 0x6e6bbc, 0x3, 0x0, 0x3, 0x3}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24048800}, 0x40000)

05:44:16 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)

05:44:16 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(r0, 0x0)

[ 3085.516466][ T4857] input: syz1 as /devices/virtual/input/input329
05:44:17 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, {0xb211}}, 0x8)
listen(0xffffffffffffffff, 0x0)

05:44:17 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1a, 0x4, 0xffffffffffffffff)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:17 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x800, 0x0)
ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x13f, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)

05:44:17 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa500)

05:44:17 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(r0, 0x0)

05:44:17 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x10000, 0x0)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f00000000c0)={0x10d000, 0x7001, 0x0, 0x2, 0x3})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000100)={0x4c, 0x3, "3327e7"})
tkill(0x0, 0x401104000000016)

05:44:17 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(r0, 0x0)

05:44:17 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, {0xb211}}, 0x8)
listen(0xffffffffffffffff, 0x0)

[ 3086.243107][ T4875] input: syz1 as /devices/virtual/input/input331
05:44:17 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0xf, 0x805, 0xfffffffffffffffd)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3086.294966][ T4880] input: syz1 as /devices/virtual/input/input332
05:44:17 executing program 4:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000}, 0xfffffd42)
r0 = socket(0x1e, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={<r1=>0x0, 0x5, 0x30}, &(0x7f0000000080)=0xc)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r1, 0x5}, 0x8)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000400)=@req={0x7, 0x49c, 0x5, 0x20000000000000}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
write$nbd(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x8a)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000280)={@rand_addr, <r2=>0x0}, &(0x7f0000000500)=0x14)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0d2e6905a482232de19d93d5329fa2f52597c8cc4b957c8b708d23ef92263de1d358a87a8326acfdc95f94ea66a75b15621a3e027fcff5924053c69c22fbaecee34e247f48d067a09481105f3c6639ff9e92286ffa9d5609ccca0e09bf7aa52a2c811a041b566f3cc0c5f97bf98235f73950087a9bed3a0d86e89875506db4097b22c7136ca717d65a399428bcec4ca4b45a7e8fd31ae30ad02f93867f070bc8c2825d00639336dd6b4f6233", 0xac, 0x40000, &(0x7f0000000540)={0x11, 0x7, r2, 0x1, 0x8, 0x6, @dev={[], 0xa}}, 0x14)

05:44:17 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, {0xb211}}, 0x8)
listen(0xffffffffffffffff, 0x0)

05:44:17 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, 0x0, 0x0)
listen(r0, 0x0)

05:44:17 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x800, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r1, &(0x7f0000000140)="4594f6ec28875a06f57a80829a8419ad1472fc626b6febb4faef3d3d74afbf85a910dbc6275620138cd89009ecfdaf9626ecb34c6b839b95096b905b8fa4e821c98049922d3ce60479e2fe8b8e2db7492088", &(0x7f00000000c0)=""/55}, 0x18)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7, 0xfffffffffffffffd)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000040))

[ 3086.589820][ T4898] input: syz1 as /devices/virtual/input/input333
[ 3086.615541][ T4899] input: syz1 as /devices/virtual/input/input334
05:44:18 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa501)

05:44:18 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:18 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x6, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:18 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, 0x0, 0x0)
listen(r0, 0x0)

05:44:18 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x4000)
setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000080)=0x29d, 0x4)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:18 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=<r3=>0x0)
tkill(r3, 0x401104000000016)

05:44:18 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, 0x0, 0x0)
listen(r0, 0x0)

[ 3087.240190][ T4905] input: syz1 as /devices/virtual/input/input335
[ 3087.279488][ T4915] input: syz1 as /devices/virtual/input/input336
05:44:18 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x62, 0x9, 0x1, 0x6, 0xb4a5, 0xdcb, 0x8}, 0x1c)

05:44:18 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:18 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)

05:44:18 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x22ac86df38bc8fd1, 0x0)
ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000080)={0x5, 0x400})
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381)
ioctl$int_out(r1, 0x0, &(0x7f00000000c0))
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
getpeername$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)

05:44:18 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3087.555149][ T4932] input: syz1 as /devices/virtual/input/input337
[ 3087.590717][ T4936] input: syz1 as /devices/virtual/input/input338
05:44:19 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa600)

05:44:19 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)

05:44:19 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept$unix(r0, 0x0, &(0x7f0000000740))

05:44:19 executing program 4:
r0 = socket(0x3, 0x2, 0x4000000000000000)
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x6, 0x6, [], &(0x7f0000000080)=0x3})
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x3)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r1, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000100)={'dummy0\x00', {0x2, 0x4e22, @multicast2}})

05:44:19 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:19 executing program 2:
r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x200)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000380)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x2, {0xa, 0x4e21, 0x7fffffff, @ipv4={[], [], @local}, 0x7f}, r1}}, 0x38)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r3 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r2, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000180)={<r4=>0x0, @in6={{0xa, 0x4e23, 0x3, @remote, 0xd2}}, 0x14940000, 0x1, 0x4, 0x5, 0x687f05a6}, &(0x7f0000000100)=0x98)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000240)={r4, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x84)
setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f00000003c0)="006178d4841234863a018576d2e3a84b7602a9e514f77618ad53ca973e5e4e4cf8544aecc286c7e3cab16bf361bf568fac882a9c1b90cd2009c071eb223d82924f86ac226f8eb50df5df75ae19a700b4c442647763a24f15ce5a5134a6306d5edec55b69065c5e4dbdd42d947bb1f863ee7fe158edc669a8fda5fb0375baa43a960e157739cd3607b9763454bc969255b827d226a07f2762576225382f0e0e1c36ea016c765f89a7e00c535fe98f517dd38c1cd07248359ecb857085c2cb2d908d09e3e566e05f5ae50343f8387016812d764e81ed0874f3bf1f7c54e77b58bef2a17137a88bcd2512df2ad5", 0xec)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x3, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3088.250399][ T4948] input: syz1 as /devices/virtual/input/input339
[ 3088.263572][ T4952] input: syz1 as /devices/virtual/input/input340
05:44:19 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x10001, 0x80000000, 0xeb2, 0x5, 0x4, 0xffffffffffff8000, 0x5}, 0x91)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00')
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000280)={@empty, <r4=>0x0}, &(0x7f00000002c0)=0x14)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14)
recvmsg$kcm(r0, &(0x7f0000001480)={&(0x7f0000000380)=@can={0x1d, <r6=>0x0}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, &(0x7f0000001440)=""/44, 0x2c}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', <r7=>0x0})
getpeername$packet(r0, &(0x7f0000001500)={0x11, 0x0, <r8=>0x0}, &(0x7f0000001540)=0x14)
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000001580)={@dev, @remote, <r9=>0x0}, &(0x7f00000015c0)=0xc)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001600)={<r10=>0x0, @remote, @initdev}, &(0x7f0000001640)=0xc)
accept$packet(r1, &(0x7f0000001680)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000016c0)=0x14)
accept$packet(0xffffffffffffffff, &(0x7f0000001700)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001740)=0x14)
recvmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000001780)=@hci={0x1f, <r13=>0x0}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001800)=""/145, 0x91}], 0x1, &(0x7f0000001900)=""/183, 0xb7}, 0x40000020)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002dc0)={'ip6_vti0\x00', <r14=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002e00)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000002f00)=0xe8)
accept4$packet(r1, &(0x7f0000002f80)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002fc0)=0x14, 0x800)
accept4$packet(r1, &(0x7f0000003000)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003040)=0x14, 0x800)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000003600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x82040021}, 0xc, &(0x7f00000035c0)={&(0x7f0000003080)={0x538, r2, 0x300, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x258, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x3, 0x2, 0x6, 0x5}, {0x0, 0xffffffffffffff02, 0x6, 0x36}, {0x7, 0x2, 0xff, 0x1000}, {0x69d, 0x88, 0xff, 0x7}, {0xb8, 0x9, 0x9, 0x1}, {0xfffffffffffffffe, 0x8000, 0x5, 0x2}, {0x0, 0x2, 0x1, 0x6374}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x7c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r14}, {0x168, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0x5, 0x4, 0x372, 0x80000001}, {0x442c, 0x80000000, 0x7f, 0x81}, {0x389f, 0x401, 0x4, 0x2}, {0x5, 0x7, 0xc, 0x20d8}, {0x200, 0x1, 0x7, 0x100000000}, {0xdb3c, 0x8676, 0x7, 0x8}, {0x67, 0x100000000, 0x8, 0x56}, {0xe7, 0x5, 0x7fff, 0x8}, {0x137, 0x4, 0x0, 0x6}, {0x7, 0xffff, 0x1}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x7fff, 0x6, 0x1000, 0x52}, {0x7, 0x6, 0xfffffffffffffff9}, {0x8, 0x6, 0x8, 0x8}, {0x3, 0xfff, 0x5}, {0xc2, 0xffffffffffff8001, 0x3, 0x100000001}, {0x80000001, 0x0, 0x6, 0x7}, {0x721c48d4, 0x9, 0x42d2d13a, 0x1}]}}}]}}, {{0x8, 0x1, r16}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r17}}}]}}]}, 0x538}}, 0x40)

05:44:19 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)

05:44:19 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

05:44:19 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
accept4$tipc(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
sendto$isdn(r1, &(0x7f0000000100)={0x7fffffff, 0x17d01617, "7215a821fdc7d82a3b46"}, 0x12, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:19 executing program 0:
r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x200)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000380)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x2, {0xa, 0x4e21, 0x7fffffff, @ipv4={[], [], @local}, 0x7f}, r1}}, 0x38)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r3 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r2, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000180)={<r4=>0x0, @in6={{0xa, 0x4e23, 0x3, @remote, 0xd2}}, 0x14940000, 0x1, 0x4, 0x5, 0x687f05a6}, &(0x7f0000000100)=0x98)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000240)={r4, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x84)
setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f00000003c0)="006178d4841234863a018576d2e3a84b7602a9e514f77618ad53ca973e5e4e4cf8544aecc286c7e3cab16bf361bf568fac882a9c1b90cd2009c071eb223d82924f86ac226f8eb50df5df75ae19a700b4c442647763a24f15ce5a5134a6306d5edec55b69065c5e4dbdd42d947bb1f863ee7fe158edc669a8fda5fb0375baa43a960e157739cd3607b9763454bc969255b827d226a07f2762576225382f0e0e1c36ea016c765f89a7e00c535fe98f517dd38c1cd07248359ecb857085c2cb2d908d09e3e566e05f5ae50343f8387016812d764e81ed0874f3bf1f7c54e77b58bef2a17137a88bcd2512df2ad5", 0xec)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x3, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:19 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x400000)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x7b, 0x71794377, 0x400, 0xfffffffffffffffe, 0x3, @discrete={0x6, 0x80000001}})
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3088.568867][ T4974] input: syz1 as /devices/virtual/input/input341
[ 3088.587791][ T4975] input: syz1 as /devices/virtual/input/input342
05:44:20 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa601)

05:44:20 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0)

05:44:20 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3089.231258][ T4983] input: syz1 as /devices/virtual/input/input343
05:44:20 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x0)

05:44:20 executing program 4:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2c2040, 0x0)
ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)="446f110412d90681801ffc694d6f94fe1ac4c52189b0a8a019b0918e5041904397a7b993ee0e417b965b1f6a282f541c84407fbd42b5c9bca3c1dc6414e63e29e7de8dff36bd192c02bb963cf485466a2df2bbd91d9a502a29f60614298b5b5b9e09755065440c4543999b121fb2dd2ea8a9efb3dab68bfc5d98053a8dcc6fbf407ca325f5121e013da7a908ab008b39c3b20f62d354e8a60595495139327ed4839f6f9609f9b72b75925d80", {0x4, 0x5, 0x78737276, 0x3, 0xffff, 0x2, 0xc, 0x100000000}})
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={<r2=>0x0, 0x9, 0x3, 0x7, 0x7, 0x401}, &(0x7f0000000080)=0x14)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0xb96}, &(0x7f0000000100)=0x8)
r3 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:20 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_create(0x1, &(0x7f0000000080)={0x0, 0x40, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=<r2=>0x0)
timer_settime(r2, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3089.272323][ T4988] input: syz1 as /devices/virtual/input/input344
05:44:20 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x10000, 0x0)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f00000000c0)={0x10d000, 0x7001, 0x0, 0x2, 0x3})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000100)={0x4c, 0x3, "3327e7"})
tkill(0x0, 0x401104000000016)

05:44:20 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x0)

05:44:20 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x10002, 0x4)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0x2})
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:20 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
readahead(r0, 0x20, 0x5)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x1c2, 0x0)
ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000080)={0x80000000, 0x5, 0x80000000})
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:20 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x0)

05:44:20 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000), 0x10)

[ 3089.571565][ T5008] input: syz1 as /devices/virtual/input/input345
[ 3089.594161][ T5012] input: syz1 as /devices/virtual/input/input346
05:44:21 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa700)

05:44:21 executing program 3:
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)

05:44:21 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={<r1=>0x0, 0x9}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x9}, 0x8)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:21 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000080)={0x9, 0x5, 0x9})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={<r2=>0x0, 0x8}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000001c0)={r2, 0x7}, 0x8)
r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3090.208323][ T5024] input: syz1 as /devices/virtual/input/input347
05:44:21 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
recvfrom(r0, &(0x7f0000000080)=""/168, 0xa8, 0x3, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @remote, 'eql\x00'}}, 0x80)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:21 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=<r3=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000180)={{0x8, 0x5, 0x1ff, 0x10000, '\x00', 0x9}, 0x2, 0x401, 0x1f, r3, 0x1, 0x100000001, 'syz0\x00', &(0x7f0000000100)=['vboxnet0},vboxnet1\x00'], 0x13, [], [0x9, 0x3f, 0x3, 0x8]})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:21 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:44:21 executing program 3:
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)

05:44:21 executing program 3:
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)

05:44:21 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000300), &(0x7f0000000380)=0x68)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2002, 0x0)
bind$rose(r2, &(0x7f0000000280)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40)
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f00000002c0)=0x3)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000180)={@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @ipv4={[], [], @empty}, 0x200}}, {&(0x7f0000000440)=""/65, 0x41}, &(0x7f0000000140), 0x5}, 0xa0)

05:44:21 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(r0, 0x0)

05:44:21 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(r0, 0x0)

[ 3090.590115][ T5051] input: syz1 as /devices/virtual/input/input349
[ 3090.622585][ T5052] input: syz1 as /devices/virtual/input/input350
05:44:22 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa701)

05:44:22 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x300)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:22 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(r0, 0x0)

05:44:22 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:22 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
socket(0x3, 0x80000, 0xb6)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:22 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x9, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@xdp={0x2c, 0x4, r2, 0x37}, 0x80, 0x0}, 0x1)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_create(0x7, &(0x7f00000003c0)={0x0, 0x38, 0x5, @tid=0xffffffffffffffff}, &(0x7f0000000400))
timer_create(0x7, &(0x7f0000000440)={0x0, 0x18}, &(0x7f0000000480)=<r3=>0x0)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer\x00', 0x400, 0x0)
ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0)
timer_settime(r3, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)
r5 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x101000)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfa, {}, ["", "", "", ""]}, 0x1c}}, 0x4000800)
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000380)=0x80000000)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r5, 0xc040564b, &(0x7f0000000340)={0x1f, 0x0, 0x300f, 0xffffffff, 0xfffffffffffffff8, {0x1, 0xfffffffffffffffd}, 0x1})

05:44:22 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, 0x0, 0x0)
listen(r0, 0x0)

[ 3091.182577][ T5064] input: syz1 as /devices/virtual/input/input351
[ 3091.232317][ T5067] input: syz1 as /devices/virtual/input/input352
05:44:22 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1000000001e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:22 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x400002, 0xc0807, 0x3ffffffffffffffd)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:22 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, 0x0, 0x0)
listen(r0, 0x0)

05:44:22 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0x1, 0x0, 0x7fffffff})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:22 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, 0x0, 0x0)
listen(r0, 0x0)

[ 3091.486743][ T5090] input: syz1 as /devices/virtual/input/input353
[ 3091.510361][ T5090] input: syz1 as /devices/virtual/input/input354
05:44:23 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa800)

05:44:23 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x4000000, 0x9, 0xffff, 0x70, 0x3, 0x0, 0x101}, 0x1c)
r1 = socket(0x1010000010, 0x1, 0x40000000000000)
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000080)=0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:23 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x101000)
ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x8, 0x606323d9aa8609be, 0x4, 0x4000, {0x77359400}, {0x4, 0xa, 0x0, 0xc49, 0x8001, 0x1, "7c95bf62"}, 0xb8, 0x3, @fd=0xffffffffffffff9c, 0x4})
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:23 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)

05:44:23 executing program 5:
r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x81, 0xc4800)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e24, 0x10000, @ipv4={[], [], @remote}, 0xfffffffffffff808}, {0xa, 0x4e24, 0x974b, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7}, 0x82, [0xefdb, 0x7, 0x3a, 0x401, 0x4, 0x80000001, 0xfffffffffffffffd, 0x9]}, 0x5c)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x17, 0x4, 0x2, 0x10000, 0x20, r0, 0x8001}, 0x2c)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:23 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x9, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@xdp={0x2c, 0x4, r2, 0x37}, 0x80, 0x0}, 0x1)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_create(0x7, &(0x7f00000003c0)={0x0, 0x38, 0x5, @tid=0xffffffffffffffff}, &(0x7f0000000400))
timer_create(0x7, &(0x7f0000000440)={0x0, 0x18}, &(0x7f0000000480)=<r3=>0x0)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer\x00', 0x400, 0x0)
ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0)
timer_settime(r3, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)
r5 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x101000)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfa, {}, ["", "", "", ""]}, 0x1c}}, 0x4000800)
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000380)=0x80000000)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r5, 0xc040564b, &(0x7f0000000340)={0x1f, 0x0, 0x300f, 0xffffffff, 0xfffffffffffffff8, {0x1, 0xfffffffffffffffd}, 0x1})

[ 3092.131912][ T5099] input: syz1 as /devices/virtual/input/input355
05:44:23 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
pread64(r1, &(0x7f0000000180), 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000100))
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000080)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:23 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)

[ 3092.174076][ T5099] input: syz1 as /devices/virtual/input/input356
05:44:23 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001a80)=[{{&(0x7f0000000100)=@x25, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001b40)=""/72, 0x48}, {&(0x7f0000000240)=""/70, 0x1b0}, {&(0x7f0000000340)=""/89, 0x59}], 0x3, &(0x7f00000003c0)=""/242, 0xf2}, 0x4bc8}, {{&(0x7f00000004c0), 0x80, &(0x7f0000001800)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/187, 0xbb}, {&(0x7f0000001600)=""/179, 0xb3}, {&(0x7f00000016c0)=""/186, 0xba}, {&(0x7f0000001780)=""/74, 0x4a}], 0x5}, 0xffffffffffff3ae0}, {{&(0x7f0000001880)=@x25, 0x80, &(0x7f0000001980)=[{&(0x7f0000001900)=""/73, 0xfffffffffffffd7e}], 0x123, &(0x7f00000019c0)=""/183, 0xb7}, 0xc4a}], 0x3, 0x0, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x10400, 0x0)
ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000040)={0x1, 0x1ff})
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:44:23 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r3, 0x47, "67f010", "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"}}, 0x110)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:23 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x0)

05:44:23 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{0x0, 0x0, 0x2}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x620000, 0x0)
bind$vsock_dgram(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711, @reserved}, 0x10)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3092.434217][ T5125] input: syz1 as /devices/virtual/input/input357
[ 3092.468046][ T5126] input: syz1 as /devices/virtual/input/input358
05:44:24 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa801)

05:44:24 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:24 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x2, 0x4)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0xddf8, 0x4)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f0000000180)=""/228, 0x165})

05:44:24 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
fstatfs(r0, &(0x7f0000000040)=""/130)
accept$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@remote, 0x8, r3})

05:44:24 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x280040, 0x0)
ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000340)={0x9, 0xffffffff, {0x57, 0x20, 0x80000001, {0x9, 0x400}, {0x20, 0x6dea}, @ramp={0xd140, 0x0, {0x8001, 0x4, 0x0, 0x3}}}, {0x0, 0xffffffff, 0x7ff, {0x4, 0x1}, {0x3, 0x1}, @const={0x3, {0x400, 0x9, 0x9, 0xc51}}}})
getsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000480)=0xae)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x7, &(0x7f0000000100)={0x0, 0x1, 0x4, @thr={&(0x7f0000000180)="450314376d9b4f430a2cb0d80fd06f3817905a3c62991991306126864887862ad7af32733a908b65abf0b7d8781eaecaa8c2589e069cb5522617c339e5d1580ff93d260a8dda97468e7f436aa34261b58e2ee7d57052ddc8991aed8867ca3c448ddf6feaf0fdd870b982e9c771237ef164a14fd4a7c32d5fc8b92aeda6d6454d7c98fcc61a9993d3146b68eb35db905ae4e042c49d0f1e1764d73c8b2e76987f643ee81c474a19638cb58d855d45425977d1a8c4c023ec9ec2ea4f21fbda8e64d35f79e6b30e8492109eb53b35a134914aa1c5f23d811b65", &(0x7f0000000080)="b14ae5dfae5eeaa08c53ac0a370ece1f16a2672cac67cbb11aad5583714e3395437f3b5ed7f8d7dd5a6465cb7a969b798243a0a3fea9317836608291c676cae1b8cf7c0a2d"}}, &(0x7f0000000280)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
tkill(0x0, 0x401104000000016)

[ 3093.083423][ T5138] input: syz1 as /devices/virtual/input/input359
[ 3093.097769][ T5140] input: syz1 as /devices/virtual/input/input360
05:44:24 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={<r1=>0x0, 0x5, 0xaee2, 0x7f, 0x401, 0x1, 0x9, 0x2, {0x0, @in={{0x2, 0x4e24, @local}}, 0xffff, 0xfffffffffffffffd, 0x5, 0x3, 0x200}}, &(0x7f00000000c0)=0xb0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={r1, 0x2, 'aa'}, &(0x7f0000000240)=0xa)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:24 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3093.149362][ T5143] input: syz1 as /devices/virtual/input/input361
05:44:24 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x111100, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x3e, @broadcast, 0x4e24, 0x3, 'sh\x00', 0xe, 0x6, 0x18}, 0x2c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1, 0x4)

05:44:24 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:24 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:24 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8)
ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080))
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3093.389752][ T5159] input: syz1 as /devices/virtual/input/input362
[ 3093.429785][ T5163] input: syz1 as /devices/virtual/input/input363
05:44:24 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x44e9, 0x22, 0x200, 0x100000001}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:24 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa900)

05:44:24 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:24 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x53, 0x0, 0x6c, {0x6}, {}, @const={0x7, {0x7f, 0x3f34, 0x5, 0x200}}})

05:44:24 executing program 4:
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0)
setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0)=0x100000000000000, 0x4)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000))
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:24 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x10001, @rand_addr="ccbe4239c2f046324d183b727be140e7", 0x9}, @in6={0xa, 0x4e22, 0x1, @empty, 0x4}, @in={0x2, 0x4e21, @rand_addr=0x7ff}], 0x48)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r2 = dup(r1)
ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x5)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={<r3=>0x0, 0x9, 0x8b94, 0xffffffff, 0x3, 0x7}, &(0x7f0000000180)=0x14)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r3, 0xffffffffffff0000, 0x8, 0x7ff}, &(0x7f0000000200)=0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x82102, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000002c0)={0x2, 0x1, [0x200, 0x7, 0xfffffffffffffffa, 0xa2, 0x8, 0x3d, 0x8]})
ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000280)={0x100000000, 0x0, 0xffffffff, 0x3})

05:44:25 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3094.086764][ T5186] input: syz1 as /devices/virtual/input/input365
[ 3094.094925][ T5183] input: syz1 as /devices/virtual/input/input366
05:44:25 executing program 4:
r0 = socket(0x3, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x1, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="10c1eb90b309b6f0126cc7410b2955e178", @ANYRES16=r3, @ANYBLOB="01072cbd7000fedbdf25020000000c0007000800010086000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f00000001c0)={0x0, 0xfddd3a6, 0xffffffffffff8000, [], &(0x7f0000000180)=0x6})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000080)={0x6, 0x3, 0x3, 0x5a53e61a, 'syz0\x00', 0x4})
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x3a, @local, 0x4e20, 0x1, 'lblc\x00', 0x8, 0x6, 0x10}, {@local, 0x4e20, 0x4, 0x3, 0x4, 0xb8}}, 0x44)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@xdp={0x2c, 0x7, r4, 0x3}, 0x80, 0x0}, 0x0)
write$P9_RSYMLINK(r2, &(0x7f00000000c0)={0x14, 0x11, 0x1, {0x10, 0x3, 0x4}}, 0x14)

[ 3094.209757][ T5196] input: syz1 as /devices/virtual/input/input368
05:44:25 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:25 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfffffffffffffffc, 0x4000)
ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000080)={0x6, 0x3b1c, 0x5, 0x3, 0x8, 0x2})
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:25 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:25 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3094.368463][ T5202] input: syz1 as /devices/virtual/input/input369
05:44:25 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={<r1=>0x0, 0x8}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r1, 0x3f}, 0x8)
r2 = socket(0x1e, 0x2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r3 = socket(0x200000008, 0xa, 0xfffffffffffffffe)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r2, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090826bd7000fbdbdf250e0000001c000704000000000000000008000100f80000000000000000080000001c0005000400020014000200080001000800000008000300090000"], 0x4c}}, 0x4)

[ 3094.425798][ T5210] input: syz1 as /devices/virtual/input/input370
[ 3094.433956][ T5211] input: syz1 as /devices/virtual/input/input371
[ 3094.449171][ T5212] input: syz1 as /devices/virtual/input/input372
05:44:25 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xa901)

05:44:25 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200000, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x8001007, 0x4, 0x3})

05:44:25 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')

05:44:25 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:25 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x10b, 0x40)
setsockopt$inet_buf(r2, 0x0, 0x3f, &(0x7f0000000080)="df968b32886cdba6ca30b382a6eb4af6f03a7732dcd1d69d0889bd485633b545bc65878b2e280cecc2283ad1723a9250e6a375bce23875aaddd306e73bb0610d782e39", 0x43)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:25 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
sendmmsg$nfc_llcp(r1, &(0x7f0000000e80)=[{&(0x7f0000000080)={0x27, 0x0, 0x2, 0x3, 0x4, 0xffff, "a3c826090d845c7580cbff37cae894731b39045741568bec6e33d26fb6987cf04e184d73225b976e455b13c5dd59fee600ecf580914b5840886fd4ea3ad089", 0x1f}, 0x60, &(0x7f0000000340)=[{&(0x7f0000000100)="cdb9fd65034d30aa36ce906285586fc11970619355bd253aedfdd5a14a84b3cb68660c0f2d7b4dc9e6ae1fb760e7", 0x2e}, {&(0x7f0000000180)="833342167eee01a285bd21188dfffe6a6d0d906c556d81c6e3c87d961072cca4eb3ef67992deaf83003907f6ff7be0f8b51918d6485045647a64d98620b74ebe731ba201f028f6c8f081fddb979084dc06a32d5001efb9518f8c9fc5a16c3af5e6641e547aa3d2f9c435223c92a0aeacc931f47d56ec32dfbe2b7522c6d21c643cc852113e870d17fe78c6890fb4c51c87fdca7fe55cca80c16fa1f287948badb8b305dbcc171125ee32bc6b11ef4bdb1e238356bf2a100894a67074d2e0c03c53adf6d7f6ca6775335da99c81f7605e", 0xd0}, {&(0x7f0000000280)="89b15b86a9de3340d654d0439189a109b58a38da960ae92e9e23e75f3c5316590a90b134f77d1bac4a2c1535071e6749dfa13a6dd8a040ea75ef030a4195e071034621365479da2360ac825795c3676159de5db8c605d2f0016648687da671be34f68fff6aaef00e5b79e254887e73eb7dfe0fbcdd6779e0845bfb4d7d56ea5184125671e0dbd5412a8a318a687ab023c3c7196fbff7461bf5596380c256a6527a4f706988", 0xa5}], 0x3, &(0x7f0000000380)={0xc8, 0x108, 0x9, "92fe619befb402e43032b6b35a3b078e466f98824464e692184c2c413f5724218e0c39847639c2163f39f3d4b487b89fad7ec735c5acf96ae713235ef93a24747b4a86075f6bce2ac38e71bfc72659f6b2a10c818ca05129f05f843329856e2c798290b76390b55720d07a5c72357cd0c43c31d761741a0c56bacff3eb924a59a8ffa719d9b21b908729fbe5786630e08d30ee69ec982bfd5fd7f57c656a32d49085452e9d810b0fda4f1092296aaf8a88948657685849"}, 0xc8, 0x20004080}, {&(0x7f0000000480)={0x27, 0x0, 0x1, 0x0, 0x40, 0x2, "7214f9f69efdedce29899bf8750a1d793149df538875dd2c6725076b004c20e459fff369c1dc4514793ccea51e718a2032fdf679c67476d4b933efa5d2565c", 0x4}, 0x60, &(0x7f0000000580)=[{&(0x7f0000000500)="d06f905914dbe09cc6233cda2f50342057f309025c72a743fd58023e991993dd5552779110a75a08b17d8131a14628ca3a12d965e003ca9f854716af05ee0de682fda86bcbf7fa44ff5955174ae3cd892d62", 0x52}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="48000000000000001100000029000000d9f2774252fe0000004d894d85fb51c47ca9db4f5cfb4703634c12891a225ebee75622ef1b8e5b3963796f74d6db526cd8b1000000000000"], 0x48, 0x54}, {&(0x7f0000000640)={0x27, 0x0, 0x2, 0x7, 0x3ff, 0x5fa, "abe794cacc7d2061b1229c47f1a96972d0c25e9950811e5f60d663fbd7e910e52679764474d0a3adddbf811674596aa25ad037bef7cdc54c1809ee892fefda", 0x32}, 0x60, &(0x7f0000000880)=[{&(0x7f00000006c0)="da6f82a165ea355aa9aa2d017f6f02f3325772849bd8e2e218953eaf128bc6aa6e5973", 0x23}, {&(0x7f0000000700)="9212575e15891eec912d352e230f09f5f8657f6562d3fddb25751967ac509c4de3e92da8c7511b4f26d922cafad8307eba381b6c5784d6a23db51aedaf12a81ff0108d366e1c7b90d32d9bb7cdbff0b8f2b95778498ac38444cf34460f9d5484efec63b20b82e3f111db911c9510ebf1c60a25ccf6abcdc84be718", 0x7b}, {&(0x7f0000000780)="96f5ffe49f13d3eba058a182829dfe2c3541d4cb082beed23f32e1880f4dcfd2260a83", 0x23}, {&(0x7f00000007c0)="29a4729dc71c5571d776ef981052cd6d74a091b188cb86ee836b70674d7ec2e76cd6a982e7a33bdb46f156aaf29463450342885adab970b952255ad77ecd706bb09cd961de90f24d837b9804e72329d333c9faf479206d64a151d7234dc00e80bb451b13d8e78fc759662fbc57d726d09be32f3d5e1c4e682b1a88cf696f3a39995179cf3182a148ecbbb0b5cd03e5a4c0bc", 0x92}], 0x4, 0x0, 0x0, 0x4}, {&(0x7f00000008c0)={0x27, 0x1, 0x2, 0x6, 0x8, 0x1, "4abeab5f27c8a13573ebf9bf7154fd961d35144ada3cd9cc059b69a1186865eeba475c139054eb4a1c216fafc334fb2a98e8ac91a34ffb89cb6ba86a05c593", 0x39}, 0x60, &(0x7f0000000d80)=[{&(0x7f0000000940)="b34ee80d31e40a95d335721c0d5e36f1e78cc8bfb738e4cc11da68078428a8c0e179434d67c16d53a209e0ec54fbf3b8d08c98bb2cf969696eec6f978dfb0c8950abaa3848fc12f1f3bc06bf12973de8d0fe8b847bd7e3f7edee69c646bd7a5452285acbdd1b444db137fd9dc40483505ff3f8d359fd0320c309898c", 0x7c}, {&(0x7f00000009c0)="9e603048474ca67e5706797b7761410b41499709f30cf124ea52a5e610", 0x1d}, {&(0x7f0000000a00)="a6402ca6dff10fa5bb40b257d9bb8d51facf", 0x12}, {&(0x7f0000000a40)="03a12b3c5bd2e8b8d05164b06def8bfd1879e2bb681dc107b5d94dccbd4c7a73b085e265e62720c3f9ae63bbbc678f3e11844134440e0f23668979f4856672b1458698bf3ac3400b1602dac5e59699c06a9ba1b7f768b23c229a998d3f3793b84177f3a7ea57245e80bf69b8d4d89da450d3cdf4b802a1722c511f548ea9c42a66167a91ea9709c58b67cedf59282d1a3ec9f8959fafc03a9fb9eadec8838d324796cce418fd3f4ad2a5c1e25a6ec6a7d9ecae5ae685febb93b3321ae604b02551cb9fafbe18847c5fac705af9e2db9c0e3443f4776dfc1e", 0xd8}, {&(0x7f0000000b40)="5f26ba0b02b706f8a4b2def749e8ccf1a71aaa759ae65a759f82568d093a4ae1dba035a5c64c55b0f692640017e73c499716e3f05267cbfa926b182ac0dea0ed48dfaa4da84c81a5fd4438873042ef729e458d7efd15f8719d159cf423a89e6e205ea8264671482a1ba83bb10637b0450598b3fcb969bce7ef15e03c335a3d51dcbfb579e37f16fac97f999e26271b5a0ae23dceb1ee56c2cde4", 0x9a}, {&(0x7f0000000c00)="faea61822039c757ecade65e49a34cbe949c00e38989d45d1312a71ee0e521d53133d2d3a4ecf811ee36", 0x2a}, {&(0x7f0000000c40)="227ae28ba3359d2db090be16522b9f1a8a1a4ca80896a96e232d7ddfbdb9bf344e8d83e43c741394295218e6bf1e41b99e04d977536541e6929d0796779db2e0e7058a1afc5deb0bd0f353fecaf7eb60b89e0ae125", 0x55}, {&(0x7f0000000cc0)="a52ef071c951628eeb1cd3c7b49e3303fa0083e190a3612e9002c51b6b8ca88a0fb649506becbd9cf4a4b856fc3f4d7828f1994ecad8ac77bfafe9724d30bb364e808bee39e2c442fbad6bd1bb44af4c0587175616036bceff156c9489ab151d048c005b95f842c2fd980c85bfedbfcc4ab3925d61d163e641a154ff75e717575db07e36d0bba8f404871dd85ea51eeab078d8dc2de12b6d59c7b3470d908649fc3a1ae4acd1", 0xa6}], 0x8, &(0x7f0000000e00)={0x78, 0x0, 0x101, "ad8fedc911085f9c7d253175d5c068d13609fa15f63ee99b0c12c06b820bc87e50adb271c2d6c1bad4049102bd5854b82e615008d9c2638f404532bf6913acdcd08e0d3c62a121a54304db256e99033be9caaf10e99f0270afa2070f306c4d08dd20"}, 0x78, 0x4000000}], 0x4, 0x4000000)
openat$dsp(0xffffffffffffff9c, &(0x7f0000001380)='/dev/dsp\x00', 0x200, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001200)={<r2=>0x0, 0x4, 0x7fffffff, 0x80}, &(0x7f0000001240)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000001280)=@assoc_value={r2, 0x2}, 0x8)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r3 = socket(0x1e, 0x800, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001080)={<r4=>r2, 0x1}, &(0x7f00000010c0)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001180)={0x401, 0x4, 0x8200, 0xfff, 0xaa0, 0x20, 0x100000000, 0x3, r4}, &(0x7f0000001140)=0x20)
ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f0000001300)="108cedfb0c63ae8acd06126ec2f9007e8c84b5d8cdab18296c423c1c46404a30232d92eadc6737fbd728749732cf422879eabd6b269bf0959c5a3037c5675037a3cc9c53e59adfe575ad6510683b26d29533683585abd2ae56a75fb712c458ffa41473ecc07ff55bb341cbecaed6d54b56e33073")
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001100)='/dev/dlm-control\x00', 0x200, 0x0)
time(&(0x7f00000012c0))
ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead)
r5 = add_key(&(0x7f0000000f80)='user\x00', &(0x7f0000000fc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$describe(0x6, r5, &(0x7f0000001000)=""/102, 0x66)

[ 3095.077550][ T5233] input: syz1 as /devices/virtual/input/input373
[ 3095.099879][ T5236] input: syz1 as /devices/virtual/input/input374
[ 3095.108556][ T5234] input: syz1 as /devices/virtual/input/input375
05:44:26 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000340)=@req3={0x80000000}, 0x1c)
r1 = socket(0x1e, 0x805, 0x0)
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x4, &(0x7f0000000280)=[{&(0x7f00000000c0)="f29bd5238db453db13", 0x9, 0x4}, {&(0x7f0000000100)="61e50d74a28828d499a6aa0a06040c96c0e61bfb136d8386b8e5951f670c0864bfed18fa2f5161", 0x27, 0x2}, {&(0x7f0000000180)="e495eec46691f7de3b4214282fcc5b68144d40133f68e95792f1f542ebd2f6643bdfe679b9a352b35ab932b9c08c43bad2f9279f12d3c141498b0c2e147c8b4e70ce5a153bacc80c617c8c24227ac352154d8acda90fb80c6a9f349fbe220e2554307037d51cb512db7aec6d4cdc9a427971f1d8ea876fa02f10a1266b1718edbf0bb5fd50d1cb7d656089339b16a71d6ea21ea3ec2321259b", 0x99, 0x15}, {&(0x7f0000000240)="599948036b6365fdf9db82c834da8dd48b1f0c7e48c59902eeeffa", 0x1b}], 0x1000, &(0x7f0000000300)='#securityposix_acl_access(nodev#.vmnet0\x00')
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:26 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')

[ 3095.210082][ T5240] input: syz1 as /devices/virtual/input/input376
05:44:26 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000500)=<r3=>0x0)
ptrace$setregset(0x4205, r3, 0x2, &(0x7f0000000580)={&(0x7f0000000540)="a8b04f070c81ab884be643c8c1998eaa66d69c5db88c", 0x16})
socketpair$unix(0x1, 0x7, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_create(0x3, &(0x7f0000000180)={0x0, 0x20, 0x1, @thr={&(0x7f0000000080), &(0x7f00000000c0)="422a8b7f921d223ee10d627955dcc2dc63e75b3017c6ac9a159db76252de326ea0bcca831558c4d22bff6b486bbf7800d27aee78c93ed08e23872b6008849ff8bd"}}, &(0x7f00000001c0))
timer_create(0x7, &(0x7f00000003c0)={0x0, 0x26, 0x1, @thr={&(0x7f0000000200)="c9e89837bfc5053dd04a58a8e26cd567316d0f4a013a36c0f224a81b6e4599298dc57b57083e9d797b556fadf3f7e72bc56bd81d4fff37c52fa672e2ee333408bf2dbc10107e73d53bbf1b3d5d6b943105cf53c8031f05538839773945dfe30d4725be94f6648c47acd8bf8680d2d909ab82e5dbbdd52395540eba42e7a17a34d1a8d29a3d86ba11666232684aa2d0d84b113051cdf5218a81ec60a6ad20e647a011cc945ecc2a9a5194b4e6b50c91f489c12f52908a0743452a98ca97b6db266976119576cd6a8265b1847881", &(0x7f0000000300)="968874386737843d7b846dcef89a4630d8028ea11c3b95f887fa66047a71692466521c5718e3b00971e7751db1c49d86ba7799895b726c0ed1e894649653f9d2dfe3c04399e56117e007adb88465191ee0d476e5495953c4d65ced431f5af01370d93aaeb6f26b640f5baef6220484d527d2cf87a81c064a33f19f72607bb7eae08cd9d5397dc0aff18100656e8199261ce1378ac3da487aebba09ba62bec9a0786ec1af2992bf"}}, &(0x7f0000000400)=<r4=>0x0)
timer_settime(r4, 0x1, 0x0, 0x0)
tkill(0x0, 0x401104000000016)
r5 = fcntl$dupfd(r0, 0x406, r0)
renameat(r5, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000440)='./file0\x00')
bind(r5, &(0x7f0000000480)=@ethernet={0x307, @remote}, 0x80)

05:44:26 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

[ 3095.329806][ T5255] input: syz1 as /devices/virtual/input/input377
[ 3095.345607][ T5258] input: syz1 as /devices/virtual/input/input378
05:44:26 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x340)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:26 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x20000, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket(0x1b, 0x80000, 0x4000)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xf6590b284ff72d3b)
ioctl$void(r0, 0x5451)
r3 = dup(r1)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={<r4=>0x0, 0x80000, <r5=>0xffffffffffffff9c})
ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000080)={r4})
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000440)=<r6=>0x0)
waitid(0x2, r6, &(0x7f0000000480), 0x0, &(0x7f0000000500))
getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000005c0)={@dev={0xfe, 0x80, [], 0x17}, 0x7, 0x0, 0xff, 0x6, 0x7ff, 0x9}, 0x20)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f00000003c0)={'filter\x00', 0x4}, 0x68)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={<r7=>0x0, 0xf5}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000340)={r7, 0x4, 0x3f}, &(0x7f0000000380)=0x8)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
ftruncate(r5, 0x10ca6f7e)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/157, &(0x7f0000000280)=0x9d)
setns(r3, 0x31fffffc)

[ 3095.464949][ T5266] input: syz1 as /devices/virtual/input/input379
[ 3095.514978][ T5270] input: syz1 as /devices/virtual/input/input380
05:44:26 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xaa00)

05:44:26 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')

05:44:26 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:26 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00')
getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000900)={'team0\x00', <r4=>0x0})
recvmsg(r1, &(0x7f0000000ec0)={&(0x7f0000000940)=@hci={0x1f, <r5=>0x0}, 0x80, &(0x7f0000000dc0)=[{&(0x7f00000009c0)=""/43, 0x2b}, {&(0x7f0000000a00)=""/162, 0xa2}, {&(0x7f0000000ac0)=""/168, 0xa8}, {&(0x7f0000000b80)=""/208, 0xd0}, {&(0x7f0000000c80)=""/174, 0xae}, {&(0x7f0000000d40)=""/94, 0x5e}], 0x6, &(0x7f0000000e40)=""/106, 0x6a}, 0x40)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000f00)={{{@in=@loopback, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000001000)=0xe8)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001040)={<r7=>0x0}, &(0x7f0000001080)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000010c0)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f00000011c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001200)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000001300)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001340)={'team0\x00', <r10=>0x0})
r11 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-monitor\x00', 0x240000, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r11, 0x8008ae9d, &(0x7f0000000500)=""/220)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002900)={'lo\x00', <r12=>0x0})
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000002940)={@mcast2, <r13=>0x0}, &(0x7f0000002980)=0x14)
r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400400, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={<r15=>0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r14, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x10000, 0xcff1, "1ec1d457ba8194a5fb528523b013f4363f6161b1dbb767fff3b6f837d358bb04cf699be11830b970648588e822ba1329ffc9180a2a75b4fca72dc903ca808285e4d34be985bea436f654bd47226303885ef6c69e3cf088835ed2a9387a603e7cc1a17a4048ee217d6eba43e15be46732964908662470746eca40be1d0b59cc99c6d4d2460d4b17b0628aadd4b7d6d8d92b8c080f0522be2e12835ebe542cd2f853843c17cc3aeeb5881e8f49489464a89489c33f8045dda676454b5d1bb34e37489004bbe9389f00e3febbb4d62a1f9a9f5b438eb065c0a99203828178913b476e8a63ae1ac256dfd6278f0cfda93d1fafed7fde4891c76189fa327f9b0e3acf", 0x74, 0x80000000, 0x3ff, 0x7f, 0x48, 0x1, 0x7af}, r15}}, 0x120)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000029c0)={{{@in=@multicast1, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000002ac0)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002b00)={'team0\x00', <r17=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002b80)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000002c80)=0xe8)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003040)={&(0x7f0000002cc0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r2, @ANYBLOB="000625bd7000fddbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="6c4102003c000124000100757365725f6c696e6b75705f656e61626c6564000000000000000000000000000800030006000000040004000800060000", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400060000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000100000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004008000000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400523f000008000100", @ANYRES32=r8, @ANYBLOB="e801020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000010008000600", @ANYRES32=r16, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004003770000008000600", @ANYRES32=r17, @ANYBLOB="f6ec248e24000100656e61626c656400000000000000134a0000000000000001000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004001f000000"], 0x378}}, 0x1)

05:44:26 executing program 5:
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000140))
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x3)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3096.046804][ T5281] input: syz1 as /devices/virtual/input/input381
[ 3096.072661][ T5283] input: syz1 as /devices/virtual/input/input382
05:44:27 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

[ 3096.101405][ T5286] input: syz1 as /devices/virtual/input/input383
05:44:27 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
pipe2(&(0x7f0000000100), 0x80000)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:27 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3096.226205][ T5294] input: syz1 as /devices/virtual/input/input385
05:44:27 executing program 5:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20000, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000080)={0x6, 0x1b0})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:27 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3096.344824][ T5301] input: syz1 as /devices/virtual/input/input386
[ 3096.365224][ T5298] input: syz1 as /devices/virtual/input/input387
05:44:27 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x10d202)
setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000080)={{0x5, 0x4a48}, 0x21}, 0x10)

05:44:27 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
pipe2(&(0x7f0000000100), 0x80000)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

[ 3096.512962][ T5310] input: syz1 as /devices/virtual/input/input390
[ 3096.543425][ T5312] input: syz1 as /devices/virtual/input/input391
[ 3096.552882][ T5313] input: syz1 as /devices/virtual/input/input392
05:44:27 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xaa01)

05:44:27 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:27 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
pipe2(&(0x7f0000000100), 0x80000)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:27 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
poll(&(0x7f0000000040)=[{r0, 0x1000}, {r0, 0x4}, {r0, 0x1}, {r0}], 0x4, 0xd1)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:27 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000004c0)='/dev/vbi#\x00', 0x2, 0x2)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000500)=0xfb, &(0x7f0000000540)=0x2)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=<r3=>0x0)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x400840, 0x0)
ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000180))
connect$inet6(r0, &(0x7f0000000580)={0xa, 0x4e21, 0xe06, @local, 0x80}, 0x1c)
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x10000, 0x1, 0x800000000, 0x0, 0x3, 0x8800, 0x2, 0xff, 0x3f, 0x5, 0x3, 0x10001, 0x6, 0x8, 0x9d66, 0x3ff, 0x10001, 0xfff, 0x49, 0xf8, 0x2, 0xfff, 0x4, 0x7, 0x4, 0x1, 0xff, 0xfffffffffffffe00, 0x180000000000000, 0x5, 0x293e59c0, 0x7, 0x1000, 0x80000001, 0x7, 0x0, 0x6, 0x6, @perf_config_ext={0x40, 0xff}, 0x10, 0x4, 0x100000001, 0x2, 0x6, 0x81, 0xfb}, r3, 0x5, r4, 0x9)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000280), 0x4)
getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000240)=0x78)

[ 3097.056988][ T5331] input: syz1 as /devices/virtual/input/input394
[ 3097.065413][ T5332] input: syz1 as /devices/virtual/input/input395
05:44:28 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$nfc_llcp(r0, 0x118, 0x7, &(0x7f0000000180)=""/218, 0xda)
r1 = socket(0x5, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0xffffffffffffffc0)

05:44:28 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:28 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x34e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x78)
tkill(0x0, 0x401104000000016)
r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6, 0x4800)
write$FUSE_DIRENT(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="500000000000000002000000000000000220000400000000000000000000000000c3c1567c0c08a5e4c615f1000000010000b80700000000000000ff7f0000000000000b00000001000000000000000000000000"], 0x50)

05:44:28 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

[ 3097.221771][ T5332] input: syz1 as /devices/virtual/input/input396
05:44:28 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:28 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:28 executing program 4:
r0 = socket(0x1e, 0x2, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x1f, 0x8, 0x6, 0x6}, 0x100dd)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3097.366078][ T5353] input: syz1 as /devices/virtual/input/input398
05:44:28 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:28 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x200, 0x40000)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x5, 0x4, 0x3, 0xf92ea9fc00000}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:28 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:28 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200, 0x0)
write$P9_RREADLINK(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000004eb1ab0b97ec5646dd051702004386a8b10b4ab8c830"], 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:28 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xab00)

[ 3098.034799][ T5376] input: syz1 as /devices/virtual/input/input399
05:44:29 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:29 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x1000, 0x4)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x501001, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x2, 0x1, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3098.079080][ T5384] input: syz1 as /devices/virtual/input/input400
[ 3098.117667][ T5385] input: syz1 as /devices/virtual/input/input401
05:44:29 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={<r2=>0x0, 0x5}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYBLOB="9a000000b6102f0d4e558437415825bdd20b8a331fe82bdc227ede6936466943a487d42636be1b1c2d397d13714ec0ae5ddcd23b4ae47c167565a662051d64de4dcd827b112b3c83a43aa75519909af6dd8d24a2962ac2319b03ae8f34d7b38367cf8f6bfd526f2dbbcee7156cba9ac0f4705902c62ef511c562a21e142972709760fdd14abcda066d15671388b9fc5e84ca7d7eac192086d0236abb1d35e77089fb04407348d3963a45f4c89b3209c21b3d5fe15a72a05bdbd2da14a0d6935f96c7f4c0abaf68b1905bda989a9078a7429cb54d45061a8772025d5fec16243ed55312ace52e7f0f9fa55779366f51977a5910b726f1af7ac6aa19a6eabda679042337dbb6b9e6aa2e7d6c0109380e64e6b77bf4192172ae29641804e9c9c2bbfc3f84234277c3df104e15bec0fca8e323e36347d86e5a4f17b7ee511e62003c9c9e99cd858006983f10740d62bb2ebaf662e720555167c26dd288842a7587573497dd6217318f7fe4d95a8f2c66cce6f0371918f465bfdae30eb8e6c27ad47801789b30c3a9e3e1310000000000000003511cd2d33f950fd6cb377102eb40faab2e0682d211d418cc3928d39af9807b5699b5842da88c8389b983ee61f93a33e27187bb72957de9c2ebeb5538afa9887b92bced06ecd9e0dc721b42db477e05e08eac9e8488f502dfc54ec7f9df51771b4e7d090c10bc4bfe0f0db54013859c1169010716cd9c5da1b10119c071ae250ec117ac3893998646bde01be56bf3e3a1f1fbf1eee3b074ce81e50553e6d4490be18f7f8a5c660c1e0669ed013f0e0b26d1b8b5b15d28171df9b0a85164fad93be8a3"], &(0x7f0000000340)=0xa2)
r3 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x70, 0x100000001, 0x7, 0x7fff, 0x0, 0x0, 0x7fff, 0x20440, 0x2, 0x2, 0x8, 0x2, 0xffff, 0x3, 0x7fff, 0x2, 0x7, 0x1ff, 0xff, 0x1, 0x200, 0x7f, 0xe00, 0x8, 0x8, 0x2, 0x1000, 0x3, 0x800, 0x8, 0x815, 0x9, 0x4, 0x0, 0x8001, 0x9, 0x8, 0x0, 0x7fffffff, 0x6, @perf_bp={&(0x7f0000000280), 0x1}, 0x20e0, 0xfe7, 0x798846a5, 0x0, 0x7fffffff, 0x2, 0x57}, r1, 0x0, 0xffffffffffffff9c, 0xa)
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20050, r3, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000080)="4353ac77f22088a52ce00fa704d3b0fcc4edd591a5d776963553e9ff54f97741efa4bc4f0a3dd804a75173e9a376cbc9a5957a0bce194a8ad26fb9b3bc15725c9eb8447c1bb8448f55286c4b3e7f38e90374b4e0112697869387df306a664b983e8e126525b01ba9cdf8015ff002ae5719cfe063856901478191010d230fa49b33a8c5b04e6eb24c46febf783a37e41762dc4fc6e83061ac7128355dc05f678a8866a8d23b1b3496d05af8d61868b767c68f18f79ad950e5a89c3c2abbda56", 0xbf)
mkdir(&(0x7f0000000000)='./file0\x00', 0x26)
sendmsg(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x15, 0x0}, 0x0)

05:44:29 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:29 executing program 0:
r0 = syz_open_dev$evdev(0x0, 0x4, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:29 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x210000, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000080)={0x1, 0x0, [0x0]})

05:44:29 executing program 0:
r0 = syz_open_dev$evdev(0x0, 0x4, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:29 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:29 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200000, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000080)=0xff, 0x4)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:29 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000300)=0xe01, 0x4)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x11}, 0x9, 0x1, 0x3, 0x8, 0x9, 0x2}, 0x20)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58010000", @ANYRES16=r1, @ANYBLOB="090326bd7000fbdbdf2508000000d8000500080001006962000008000100657468000800010075647000080001006962000014000200080002008400000008000300010000802c000200080001001d00000008000200910000000800010014000000080004000400000008000300008000003c000200080001001900000008000400010000000800030001000000080001000e00000008000300060000000800010014000000080003000002000008000400720c000008000100657468001c000200080002000400000008000200060000000800010009000000500001003400020008000200001000000800030008000000080001001f000000080002000008000008000400170000000001006574683a76657468305f746f5f62726964676500100002000400040008000200020000000c00060008000100a6c90000000000000000000000"], 0x158}}, 0x40400c0)
r2 = socket(0x1e, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={<r3=>0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x204, 0x4, 0x9, 0x1}, &(0x7f0000000400)=0x98)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000004c0)={0x7, 0x200, 0x8, 0x80000000, r3}, 0x10)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYBLOB="8200000035ca7a6aa6ddbc29a10069e28839c05389085cf533702608680411f26eda5154136b338c96be57e23bca9ccfb2f81c176a1600b21aacdafecaa198280d512f76306c1ef5bceaa0aa31c996d03fe9e8fa93b46b5584490c9f9ae71ff79a306f2f7397d9e93dee8b8d39c850c565abd102aa8cd888b8c983c850d0dc51eaede1dbc3b9103ca24f95ac4195b9d29612180cae31f2f674e6437be4bdb5fa0a4bda3351b78b6fac3bb4727267b0dc6ac049ed63c71214ae9d1a472dc1247a850724722b82bc1658386fe839c7e584e64d70d19fe3bbccb16918a589a41c2ebf438170132a7724fc2c7fb6e5a9479500f08d6b0ecee7d6433478bba890ee784d2850cade44aec64dfd7d550711855839149745fe1a33d6de92076c87e5b00e5b1c5d5c87b29951a16ad4cf1745c80bfbb845db05f46e9ebe788059e9a37cae4d34b8fa"], &(0x7f0000000600)=0x8a)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000440)={r3, 0xffff, 0x997, 0x6}, &(0x7f0000000480)=0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:29 executing program 0:
r0 = syz_open_dev$evdev(0x0, 0x4, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3098.640627][ T5417] input: syz1 as /devices/virtual/input/input404
[ 3098.662758][ T5420] input: syz1 as /devices/virtual/input/input405
05:44:29 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xab01)

05:44:29 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/qat_adf_ctl\x00', 0x200800, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x200000, 0x0)
ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f00000005c0))
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000004c0)={0x9a4, 0x5, 0x1, r0})
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={<r3=>0x0, 0x5}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={<r4=>0x0, 0x8}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000300)={r3, 0x6, 0x6, 0xfffffffffffffbff, 0x7, 0x3, 0x4, 0x7, {r4, @in6={{0xa, 0x4e21, 0x800, @empty, 0x9}}, 0xbe, 0x6, 0x9, 0x2340e387, 0x3ff}}, &(0x7f00000003c0)=0xb0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snapshot\x00', 0x0, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000540)=0x7fe000000, 0x2)
ioctl$TCGETA(r5, 0x5405, &(0x7f0000000440))
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x987281fa7295dc8d, 0x0)
write$P9_RLINK(r5, &(0x7f0000000580)={0x7, 0x47, 0x1}, 0x7)
ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000080)={0x13, 0xef, &(0x7f0000000180)="58716636be0bfa812bda83bb3df7b0ca7e9b94cdb75fc9a387aa599dfb6848723c0fc3157fd3826479d44e898f4b4aa20721db9d4b4853d29d10cda2e90a4505594f9b20497e3e814edb31999a471dfbfb0d56f1d233c3ea8ae161c92cdd6d8cf27c4383cf4c7e342b89c69e0936fa20dfff84d35cd4283cca63ec8891d09f32a0b9ce6c73ee7f0a268e4ecd8bcd8f1c15676fa6b96c162e4db7141cf2210146b887dd9c9900d174ea3a4c91bf2ec3023a97977b7473706e4b64f8984ce57b37462dc78a7991fd1616776c6e3ad765b666260945c8f669884eb1ff2960df7d395952c810cf6fd9459b35a9fbea0c5e"})

05:44:30 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:30 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:30 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:30 executing program 5:
socket$unix(0x1, 0x5, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x280080, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000014c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001500)=0x14)
connect$packet(r0, &(0x7f0000001540)={0x11, 0x1c, r1, 0x1, 0xa4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {0x2}, @ramp={0x8, 0x7fff, {0xfff, 0x68e4147e, 0x4, 0x40}}})
r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x240802, 0x20)
ioctl$ASHMEM_GET_NAME(r4, 0x81007702, &(0x7f0000000080)=""/36)

05:44:30 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2)
ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/4)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:30 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:30 executing program 4:
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000001, 0x0)
ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000180)={{0xd000, 0x4, 0xb, 0x8, 0x20, 0x7, 0xc1, 0x4, 0x6, 0x4, 0x2, 0x2}, {0x10f000, 0x1000, 0xd, 0xf65, 0x80000000, 0x0, 0xfffffffffffffffd, 0x1ff, 0x6, 0x2b, 0xfffffffffffffffc, 0x8}, {0x6, 0xf000, 0xc, 0xc3, 0x7, 0x6, 0x1f, 0xd84a, 0x9, 0x5, 0x3, 0x20}, {0x16004, 0x100000, 0xb, 0x7, 0x81, 0xffffffff, 0x7, 0x0, 0x0, 0x3, 0x3a, 0xfc17}, {0x2000, 0x103002, 0x1b, 0x4, 0x9, 0x3, 0x1c, 0x100000000, 0x20, 0x80, 0x3, 0xffffffffe355b5dc}, {0x5000, 0x6000, 0xd, 0x1f, 0x8c85, 0x5, 0x14, 0x5, 0xffffffffffffff2a, 0x10000, 0x8, 0x8}, {0x2, 0x10000, 0xe, 0x175b464e, 0x9, 0x7fff, 0x8, 0x9, 0x4, 0x0, 0xb94}, {0x0, 0x6002, 0xe, 0x2, 0x4800000, 0x6, 0xff, 0x4, 0x91f, 0x1, 0x5, 0x1ff}, {0x1, 0x2000}, {0x0, 0x2000}, 0x40010010, 0x0, 0x102000, 0x0, 0x6, 0x1, 0x100004, [0x1, 0x7, 0x2, 0xfff]})
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c)
signalfd4(r1, &(0x7f0000000080)={0x401}, 0x8, 0x80000)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:30 executing program 2:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x4000, 0x0)
bind$vsock_dgram(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2711}, 0x10)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:30 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000040)={0x2, 0x8, "24653ab55f64de76"})

05:44:30 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

[ 3099.374006][ T5467] input: syz1 as /devices/virtual/input/input409
[ 3099.388156][ T5472] input: syz1 as /devices/virtual/input/input410
05:44:30 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xac00)

05:44:30 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@generic={0x3, 0x7, 0x8})
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:30 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:30 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:30 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x5})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x2c00)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080))
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3099.892517][ T5484] input: syz1 as /devices/virtual/input/input412
05:44:30 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180), 0x4)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000080)="e3534a2f39a3cd56ca33528872db5378ba75bd0a9d01f829039f0c097081aeb9f93fef57e8a8ba091447d3149903b4294505de24295aa5cb143a07f08650324a637d1f75b8650410c67bbfc4044ae85a72e25ae8b5b7d825626fb7de290487d3437e12b42fc5c0157a18b1b57f675b7f96cb9b237960382641d887fcb7d136e79af68096ac6d1e4875dbab9689deca315428a5315c57408bcdf1", &(0x7f0000000180)}, 0x18)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:30 executing program 0:
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:31 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:31 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2)
r3 = geteuid()
ioctl$TUNSETOWNER(r2, 0x400454cc, r3)
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x2, 0x3f})
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:31 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x200)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x10000, 0x0)
write$FUSE_POLL(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x4, {0x8}}, 0x18)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:31 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000140)={0xa16c, {{0xa, 0x4e24, 0xe53, @loopback, 0x82}}}, 0x88)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:31 executing program 0:
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0)

[ 3100.223661][ T5510] input: syz1 as /devices/virtual/input/input416
[ 3100.288263][ T5516] input: syz1 as /devices/virtual/input/input417
05:44:31 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xac01)

05:44:31 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1f8, r2, 0xc04, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf2b}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}]}, @TIPC_NLA_LINK={0xc0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0xa}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040000)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000003c0)=@req={0x1, 0x1, 0x7fff, 0x6b}, 0xffffffffffffff35)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:31 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:31 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x7, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x480, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x608, <r3=>0x0, 0x0, 0x7bc9})
ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000100)={0x8, r3, 0x1, 0x1ff})
prctl$PR_GET_SECCOMP(0x15)
tkill(0x0, 0x401104000000016)

05:44:31 executing program 0:
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0)

05:44:31 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = semget(0x1, 0x6, 0xa4)
semctl$GETZCNT(r1, 0x1, 0xf, &(0x7f0000000080)=""/14)
r2 = dup(r0)
ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000480))
r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={<r5=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000440)='NET_DM\x00')
write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {r5, 0x78, "cff59e", "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"}}, 0x110)
r6 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200, 0x0)
setsockopt$inet_udp_int(r6, 0x11, 0x65, &(0x7f0000000100)=0x4, 0x4)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r7, 0x304, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc041}, 0x1)
write$selinux_attr(r6, &(0x7f0000000180)='system_u:object_r:var_lib_t:s0\x00', 0x1f)
ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000040)=0x10000)

05:44:31 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x9})
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3100.887960][ T5531] input: syz1 as /devices/virtual/input/input418
[ 3100.916102][ T5534] input: syz1 as /devices/virtual/input/input419
05:44:31 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
mount$9p_tcp(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x20, &(0x7f0000000200)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose='cache=loose'}, {@msize={'msize', 0x3d, 0x4}}, {@cache_mmap='cache=mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, 'wlan0]/)#eth1keyring:#:mime_type\'eth1*'}}, {@msize={'msize'}}, {@cache_mmap='cache=mmap'}], [{@smackfsroot={'smackfsroot', 0x3d, '^{%'}}]}})
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x80000)
tkill(0x0, 0x401104000000016)

05:44:32 executing program 0:
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0)

05:44:32 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x6, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x101000000007fff}, 0x1)
r2 = socket(0x40000000000001e, 0x8000f, 0x2000000000)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000080)={0x62, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x4, 'wrr\x00', 0x1, 0x0, 0x40}, 0x2c)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:32 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:32 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3101.256051][ T5563] input: syz1 as /devices/virtual/input/input421
[ 3101.265678][ T5562] input: syz1 as /devices/virtual/input/input422
[ 3101.360986][ T5564] input: syz1 as /devices/virtual/input/input423
05:44:32 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xad00)

05:44:32 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000002c0))
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:32 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffff7, 0x181880)
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000080)={0x6, 0xf000, 0x100000000, 0xcd00, 0x5})
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:32 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:32 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x40)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:32 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x3, 0x101001)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000380)=@req={0xd, 0x10001, 0x81, 0x7fffffff}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={<r2=>0x0, @in={{0x2, 0x4e24, @multicast1}}, [0x3, 0x1ff63fe, 0x3, 0x7f, 0x3c28, 0x3, 0x0, 0xac, 0x9, 0x2, 0x4, 0x3, 0x7f, 0x1ff, 0x1]}, &(0x7f00000002c0)=0x100)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000300)={r2, 0x29, "95a771a846d8ba02851da6a1645dc09ea678fcd7e8b4a669e7b914fb320de647dda388e458976162f4"}, &(0x7f0000000340)=0x31)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r3=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r3, 0x800}, 0x8)

[ 3101.921294][ T5572] input: syz1 as /devices/virtual/input/input424
[ 3101.946996][ T5581] input: syz1 as /devices/virtual/input/input425
05:44:32 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x1, 0x5, 0x7fff, 0x7f, 0x2, 0x9, 0x1437}, 0x8ca6ee33b6cf9431)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x1c)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:33 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:33 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:33 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_create(0x7, &(0x7f0000000080)={0x0, 0x37, 0x0, @thr={&(0x7f0000000180)="3c3f3b8c9031e456d830ae24b1999b420291373a0c0ca7c40308cdb8f9c37a3f167f517d5f5828467999d708677b20fd836f7d0d3cd95b93ab5724b08ebd6449132c57a0e94999854ce68d924ea0e1dda7b1143e47e1c39bb89363a81c480343dc335e1eddbf779c92146813480aa122e9fb6138d69b463a4459c20a50901336bf59f66025f80f28d02e4c327ba685a87c794c3c60916a04e8686046aebf1424f58b22f462f42d04bf1e73871b097b780bd6ff508a5c928d3badd82d184469d55261ec6146a835f6a1", &(0x7f0000000280)="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"}}, &(0x7f00000000c0)=<r2=>0x0)
timer_settime(r2, 0x1, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:33 executing program 5:
prctl$PR_SET_FP_MODE(0x2d, 0x1)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x1}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:33 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8)
r3 = getgid()
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010007000000000002000400", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040003000000000008000700", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="10000300000000002000020000000000"], 0x44, 0x3)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
socket(0x1e, 0x805, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3102.226645][ T5599] input: syz1 as /devices/virtual/input/input427
05:44:33 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xad01)

05:44:33 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:33 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:33 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3f, 0x101, 0x1ff, 0x401, 0x8, 0x100000000, 0x6}, 0xcb)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:33 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x400, 0x5, 0x0, 0x5, 0x100})
openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x4426a16c89504ddf, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10)

05:44:33 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:33 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000380)=@req3={0x4, 0x0, 0x9, 0x0, 0x8, 0x1, 0x448e}, 0xfffffffffffffea8)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x3ff, 0x200140)
lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x400000, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x80400, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=<r3=>0x0)
move_pages(r3, 0x2, &(0x7f0000000180)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f00000001c0)=[0x7, 0x0, 0xfffffffffffffff9, 0xffffffff, 0x9], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3102.881432][ T5618] input: syz1 as /devices/virtual/input/input429
[ 3102.915352][ T5623] input: syz1 as /devices/virtual/input/input430
05:44:34 executing program 3:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:34 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
connect$pppoe(r0, &(0x7f0000000340)={0x18, 0x0, {0x4, @broadcast, 'eql\x00'}}, 0x1e)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000500)={0x0, <r2=>0x0})
rt_sigqueueinfo(r2, 0x38, &(0x7f0000000540)={0xd, 0x8001, 0x2})
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x200000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f00000003c0)={{0x2768, 0x9}, {0x1, 0x9}, 0xd15, 0x7, 0x1f})
timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0x6, 0x541080)
timer_create(0x7, &(0x7f0000000100)={0x0, 0x80000000000, 0x1, @thr={&(0x7f0000000080)="0d0600d841ca5de05e54179ab748d19871fa08f2d3dea5a4aae715b2cc9a79f60032d3b0973723852919846d0384e414547ee3f81e0d3c8104b2b38b1c8ef7151dd2c133473953e632acc8cffe54765db89a0a4b3eb2fc5093ca16591565584df94d07877c", &(0x7f0000000180)="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"}}, &(0x7f00000004c0))
timer_create(0x7, &(0x7f00000002c0)={0x0, 0x19, 0x1}, &(0x7f0000000300)=<r5=>0x0)
timer_settime(r5, 0x1, 0x0, 0x0)
getpid()
getpgid(0x0)
getpgid(0xffffffffffffffff)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000480))
r6 = fcntl$getown(r4, 0x9)
tkill(r6, 0x3e)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)=0x88)

05:44:34 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)

05:44:34 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
socket(0x1d, 0x808, 0x6)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x3b1)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:34 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x20002, 0x0)
readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/126, 0x7e)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3103.151900][ T5639] input: syz1 as /devices/virtual/input/input431
[ 3103.241963][ T5644] can: request_module (can-proto-6) failed.
[ 3103.258514][ T5648] input: syz1 as /devices/virtual/input/input432
[ 3103.284404][ T5647] can: request_module (can-proto-6) failed.
[ 3103.332980][ T5650] input: syz1 as /devices/virtual/input/input433
05:44:34 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xae00)

05:44:34 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)

05:44:34 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x200000)
ioctl$sock_ifreq(r0, 0x8994, &(0x7f00000000c0)={'tunl0\x00', @ifru_flags=0x5700})
write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x2, 0x0, 0x8}}, 0x14)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:34 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:34 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3103.887577][ T5662] input: syz1 as /devices/virtual/input/input434
[ 3103.923111][ T5666] input: syz1 as /devices/virtual/input/input435
05:44:34 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8)
bind(r0, &(0x7f0000000280)=@ll={0x11, 0xf6, r1, 0x1, 0x8}, 0x80)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:34 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1, 0x809, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:34 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)

[ 3103.953723][ T5669] input: syz1 as /devices/virtual/input/input436
05:44:35 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:35 executing program 4:
r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@remote={[], 0x3}, 0x9, 'tunl0\x00'})
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:35 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:35 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000640))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x754})
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
r3 = dup2(r2, r0)
ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000080)={0x3, 0x5})
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={<r4=>0x0, 0x40}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000180)={r4, 0x5, 0x5}, 0x8)
r5 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r2, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
ioctl$TIOCCONS(r0, 0x541d)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:35 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xae01)

05:44:35 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x0, 0x802, 0x23a)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000080)={0x7, 0x0, 0x1})

05:44:35 executing program 5:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:35 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:35 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:35 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
socket(0x1e, 0x805, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:35 executing program 5:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:35 executing program 4:
r0 = socket(0x10000001e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2)
write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x8}}, 0x18)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:36 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:36 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:36 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
r3 = memfd_create(&(0x7f00000001c0)='/delo\xff\a\x00\x00\x00\x00', 0x0)
pwritev(r3, &(0x7f0000000480)=[{&(0x7f00000004c0)="2bd8", 0x2}], 0x1, 0x81806)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x600, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4)
sendfile(r1, r2, 0x0, 0x2000006)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket(0x1e, 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000180)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8)
ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f00000002c0)={r7, 0x5, 0x5, 0x3, 0x8, 0x29, 0x5})
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r8 = socket(0x1e, 0x805, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000080)=0x24, 0x4)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r6, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
fsetxattr$trusted_overlay_origin(r8, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
r9 = fcntl$dupfd(r8, 0x406, r6)
ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"])
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
tkill(0x0, 0x401104000000016)

05:44:36 executing program 5:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x10001, @rand_addr="ccbe4239c2f046324d183b727be140e7", 0x9}, @in6={0xa, 0x4e22, 0x1, @empty, 0x4}, @in={0x2, 0x4e21, @rand_addr=0x7ff}], 0x48)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r2 = dup(r1)
ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x5)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={<r3=>0x0, 0x9, 0x8b94, 0xffffffff, 0x3, 0x7}, &(0x7f0000000180)=0x14)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r3, 0xffffffffffff0000, 0x8, 0x7ff}, &(0x7f0000000200)=0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x82102, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000002c0)={0x2, 0x1, [0x200, 0x7, 0xfffffffffffffffa, 0xa2, 0x8, 0x3d, 0x8]})
ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000280)={0x100000000, 0x0, 0xffffffff, 0x3})

05:44:36 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xaf00)

05:44:36 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x1080003, 0x5)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
setsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f0000000180)="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", 0xfc)
r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x80, 0x440000)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x80, 0x6, 0x100, 0xffffffffffffffff, 0x4, 0x8000, 0x2, 0x5, 0x101, 0xe7f, 0x2, 0x2, 0x80000000}, {0x4, 0x2, 0xcc1, 0x0, 0x81, 0x9, 0x7, 0x5, 0x9, 0x8, 0x6, 0x0, 0x200}, {0x0, 0xe7e, 0x7, 0x67, 0x7, 0x2, 0x8, 0x6b27, 0x3, 0xa76, 0xc2, 0x7, 0x4}], 0x3a16a46c})
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:36 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:36 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3105.789810][ T5747] input: syz1 as /devices/virtual/input/input437
05:44:36 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:36 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
connect(r0, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x4}}, 0x80)
r1 = socket(0x1b, 0x80000, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r3 = open(&(0x7f0000000400)='./file0\x00', 0x100, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00000004c0)=@nl=@unspec, 0x80, 0x0, 0x0, 0x0, 0xfffffedb}, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000540))
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x40)
socket(0x1b, 0x4, 0x392)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r4}, 0x10)

05:44:36 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:36 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3106.016525][ T5762] input: syz1 as /devices/virtual/input/input438
[ 3106.035909][   T26] audit: type=1804 audit(1552283076.996:54): pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir542603063/syzkaller.3MB7AT/2015/file0" dev="sda1" ino=16689 res=1
05:44:37 executing program 4:
r0 = socket(0x1b, 0x1, 0x8000)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x400, 0x400000)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000180)={0x3, {{0xa, 0x4e23, 0xde76, @empty, 0xadd}}}, 0x88)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000080)={0x1, 0x5, 0xfffffffffffffff9, 0x1, 'syz0\x00', 0x8})

05:44:37 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x1080003, 0x5)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
setsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f0000000180)="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", 0xfc)
r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x80, 0x440000)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x80, 0x6, 0x100, 0xffffffffffffffff, 0x4, 0x8000, 0x2, 0x5, 0x101, 0xe7f, 0x2, 0x2, 0x80000000}, {0x4, 0x2, 0xcc1, 0x0, 0x81, 0x9, 0x7, 0x5, 0x9, 0x8, 0x6, 0x0, 0x200}, {0x0, 0xe7e, 0x7, 0x67, 0x7, 0x2, 0x8, 0x6b27, 0x3, 0xa76, 0xc2, 0x7, 0x4}], 0x3a16a46c})
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3106.113505][   T26] audit: type=1804 audit(1552283077.036:55): pid=5764 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir542603063/syzkaller.3MB7AT/2015/file0" dev="sda1" ino=16689 res=1
05:44:37 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={<r2=>0x0, @in6={{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0xf}, 0xc44}}, 0x5, 0x4, 0x8000, 0x0, 0x40}, &(0x7f0000000180)=0x98)
accept$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, r3}, 0xc)
setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r2, 0x3f}, 0x8)
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000002c0)=0xa7a, &(0x7f0000000300)=0x4)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:37 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:37 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xaf01)

05:44:37 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x72, 0x8000)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:37 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x80000)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1b8, r3, 0x128, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf770}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa7}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x38}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x252c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x983}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4a5deada}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x140000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x855}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8000}, 0x8010)
ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000080))
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
msgget$private(0x0, 0x1)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:37 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x1080003, 0x5)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
setsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f0000000180)="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", 0xfc)
r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x80, 0x440000)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x80, 0x6, 0x100, 0xffffffffffffffff, 0x4, 0x8000, 0x2, 0x5, 0x101, 0xe7f, 0x2, 0x2, 0x80000000}, {0x4, 0x2, 0xcc1, 0x0, 0x81, 0x9, 0x7, 0x5, 0x9, 0x8, 0x6, 0x0, 0x200}, {0x0, 0xe7e, 0x7, 0x67, 0x7, 0x2, 0x8, 0x6b27, 0x3, 0xa76, 0xc2, 0x7, 0x4}], 0x3a16a46c})
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:37 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3106.741808][ T5786] input: syz1 as /devices/virtual/input/input439
05:44:37 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:37 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x630000)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x6, 0x9, 0x1, "821deeb217ec335e90dcf6886e235157d1410551b7ef1ad6bb364d7bff39a1c4ebe35370c9ce91396ce6eec8cc167853dff49e6ff54f6e318a39be6aea582dfb", "1db4cbcf0b84d031b8fedf3f625650181780920349097e821c16e8b81746ab57cd5683cd1a83072a8b48f7a4ad050361ccbba90d55db8aa9599e433e48a90fdc", "3b65c7d8f99d494e9929fe58fb11b14e1da18f884ae83f4bee717a7f83eba4f4", [0x1ff, 0xbefe]})

05:44:37 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x1080003, 0x5)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
setsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f0000000180)="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", 0xfc)
r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x80, 0x440000)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x80, 0x6, 0x100, 0xffffffffffffffff, 0x4, 0x8000, 0x2, 0x5, 0x101, 0xe7f, 0x2, 0x2, 0x80000000}, {0x4, 0x2, 0xcc1, 0x0, 0x81, 0x9, 0x7, 0x5, 0x9, 0x8, 0x6, 0x0, 0x200}, {0x0, 0xe7e, 0x7, 0x67, 0x7, 0x2, 0x8, 0x6b27, 0x3, 0xa76, 0xc2, 0x7, 0x4}], 0x3a16a46c})
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:37 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x8000)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:37 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3107.000366][ T5803] input: syz1 as /devices/virtual/input/input440
05:44:38 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:38 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x1080003, 0x5)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
setsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f0000000180)="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", 0xfc)
r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x80, 0x440000)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x80, 0x6, 0x100, 0xffffffffffffffff, 0x4, 0x8000, 0x2, 0x5, 0x101, 0xe7f, 0x2, 0x2, 0x80000000}, {0x4, 0x2, 0xcc1, 0x0, 0x81, 0x9, 0x7, 0x5, 0x9, 0x8, 0x6, 0x0, 0x200}, {0x0, 0xe7e, 0x7, 0x67, 0x7, 0x2, 0x8, 0x6b27, 0x3, 0xa76, 0xc2, 0x7, 0x4}], 0x3a16a46c})
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)

05:44:38 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb000)

05:44:38 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x200, 0x401, 0x8, 0x5}, 0x6)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x402)
clock_gettime(0x6, &(0x7f00000001c0)={<r3=>0x0, <r4=>0x0})
utimensat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {r3, r4/1000+10000}}, 0x100)

05:44:38 executing program 0:
r0 = socket(0x0, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:38 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
socket(0x1e, 0x1080003, 0x5)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
setsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f0000000180)="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", 0xfc)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x80, 0x440000)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x80, 0x6, 0x100, 0xffffffffffffffff, 0x4, 0x8000, 0x2, 0x5, 0x101, 0xe7f, 0x2, 0x2, 0x80000000}, {0x4, 0x2, 0xcc1, 0x0, 0x81, 0x9, 0x7, 0x5, 0x9, 0x8, 0x6, 0x0, 0x200}, {0x0, 0xe7e, 0x7, 0x67, 0x7, 0x2, 0x8, 0x6b27, 0x3, 0xa76, 0xc2, 0x7, 0x4}], 0x3a16a46c})

05:44:38 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x8000)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

[ 3107.790389][ T5820] input: syz1 as /devices/virtual/input/input441
05:44:38 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x0, 0x1000, 0x4, 0xf8, 0xffffffffffff27b3, 0x7fff, 0xd9e}, 0x1c)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:38 executing program 0:
r0 = socket(0x0, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:38 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
socket(0x1e, 0x1080003, 0x5)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
setsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f0000000180)="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", 0xfc)
syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x80, 0x440000)

05:44:38 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1ac, r1, 0x301, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a7f4b9c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x121}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4cdf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5f}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x41}, 0x4)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x82, 0x80)
ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000003c0)={0xb, 0x2, {0x57, 0x6, 0xffffffffffffff81, {0xfffffffffffffffe, 0x2}, {0x5}, @const={0x5, {0xb56e, 0x2, 0x3, 0x2}}}, {0x52, 0xffffffffffffff01, 0x8000, {0x80000001}, {0x8001, 0x9}, @period={0x5c, 0x10000, 0x8, 0x4, 0x2000000000000000, {0x7, 0x9, 0x6, 0x8001}, 0x5, &(0x7f0000000380)=[0x8, 0x134e, 0x0, 0x1, 0x0]}}})

05:44:38 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
socket(0x1e, 0x1080003, 0x5)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
setsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f0000000180)="baaba660e9ee35efb0fdff9a8f4c0f5ac34b130615b71aa9eee9cfe6b8366558d68c034339ba5d3d832df5b553db4db4e66c5cc818b6abe566c6d33404e4335bbebecbf28be50681db665d92a7f6c5958c30aafcb88588f2683e61d1aa0652cd7676a4225e969ba93b3365a1599ee978dd7f3df0d36a19cb820760d262b981a387955f21452ba5761bca6cff1aea06a56109b4aab3b469d11722b86e1f9d93e966168df4a8231462db4f6ca0ee455ed1da3b186d8b9254fcce016f6858b21047bae9730eb01a9248e0557943e55972107b7659cb623260b3ef33b377c948173463afe8f5d1df6e59bdef2c1a7eb9d4e27827f117ace4ca43b7229bea", 0xfc)

05:44:39 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)
fsetxattr$security_smack_transmute(r0, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x1)

05:44:39 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x8000)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

[ 3108.143990][ T5847] input: syz1 as /devices/virtual/input/input442
05:44:39 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
socket(0x1e, 0x1080003, 0x5)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:39 executing program 0:
r0 = socket(0x0, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:39 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb001)

05:44:39 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:39 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:39 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
socket(0x1e, 0x1080003, 0x5)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:39 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400200, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x2, @mcast2, 0x1}], 0x1c)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080))
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000100))
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x80000000}, 0x1c)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3108.834513][ T5865] input: syz1 as /devices/virtual/input/input443
05:44:39 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:39 executing program 0:
r0 = socket(0x1e, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:39 executing program 0:
r0 = socket(0x1e, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:39 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0xffffffff, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000002c0)={0x1d, 0x4, 0x7fff})
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000380)=0x9)
tkill(0x0, 0x401104000000016)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={<r3=>0x0, 0x400}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e21, 0x10001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}, [0x0, 0x13, 0x900000, 0xe1c0, 0xffffffffffffeeaf, 0x3, 0x1ff, 0x7, 0x1, 0x9, 0x4, 0x5, 0x2, 0x4, 0x711e2992]}, &(0x7f0000000100)=0x100)

05:44:39 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:40 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:40 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0)
fdatasync(r0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000000c0))
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)={0x0, @speck128, 0x1, "1762598d380aea1c"})

[ 3109.103303][ T5882] input: syz1 as /devices/virtual/input/input444
05:44:40 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb100)

05:44:40 executing program 0:
r0 = socket(0x1e, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:40 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:40 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0)
r1 = socket(0x4, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000080))
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0300000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:40 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:40 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:40 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

[ 3109.813812][ T5908] input: syz1 as /devices/virtual/input/input445
05:44:40 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:40 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req3={0xaf, 0x4cf, 0x1ff, 0x3, 0x2, 0x1, 0x3}, 0x158)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:40 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:40 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:40 executing program 5:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)

05:44:41 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb101)

05:44:41 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:41 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:41 executing program 5:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)

05:44:41 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000180)={{0x3, @name="a8b38757a6fd9a009ebb7f86b0d6f95f03d21ce20529b0927fc9cff930c7cbec"}, "9db17b5f5bddd7aefed1dce1ea64bfc98924ad466e94646583abd058a22efb51", 0x3})
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000000c0)={0x2, &(0x7f0000000280)=[{}, {}]})

05:44:41 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:41 executing program 5:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)

05:44:41 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:41 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:41 executing program 5:
r0 = socket(0x0, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:41 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:42 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:42 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb200)

05:44:42 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:42 executing program 5:
r0 = socket(0x0, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:42 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:42 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:42 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000080)={@rand_addr, <r2=>0x0}, &(0x7f00000000c0)=0x14)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@hci={0x1f, r2, 0x3}, 0xffffffffffffff3f, 0x0, 0x0, 0x0, 0xb4e72aad94697cae}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:42 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:42 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:42 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fcntl$getown(r0, 0x9)
ptrace$setopts(0x4206, r1, 0x100000000, 0x1)
r2 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1006d)
sendmsg(r2, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:42 executing program 5:
r0 = socket(0x0, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:42 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:42 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:43 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb201)

05:44:43 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x0, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:43 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:43 executing program 5:
r0 = socket(0x1e, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:43 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x7, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0x4150, 0x46, 0xffff, 0x5, 0xac3f, 0x7fff}, 0xb3}, 0xa)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0xfffffffffffffffe, 0x0, 0x0)
getpid()
r2 = getpgrp(0x0)
tkill(r2, 0x40114c000000016)

05:44:43 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:43 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:43 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x0, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:43 executing program 5:
r0 = socket(0x1e, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:43 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:43 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:43 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x0, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3112.992958][ T6054] input: syz1 as /devices/virtual/input/input452
05:44:44 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb300)

05:44:44 executing program 5:
r0 = socket(0x1e, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:44 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:44 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:46 executing program 2:
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/ipc\x00')
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:46 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:46 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:46 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:46 executing program 4:
r0 = socket(0x0, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:46 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb301)

05:44:46 executing program 4:
r0 = socket(0x0, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:46 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:46 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3115.961964][ T6085] input: syz1 as /devices/virtual/input/input453
05:44:47 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x8000f, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x8, 0x4)
tkill(0x0, 0x401104000000016)

05:44:47 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:47 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:47 executing program 4:
r0 = socket(0x0, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:47 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:47 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:47 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x8, 0x4, 0x3f)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/40)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:47 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:47 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb400)

05:44:47 executing program 4:
r0 = socket(0x1e, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:47 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:47 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:47 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080))
tkill(0x0, 0x401104000000016)

05:44:47 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:47 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:47 executing program 4:
r0 = socket(0x1e, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:47 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:48 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:48 executing program 4:
r0 = socket(0x1e, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:48 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:48 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb401)

05:44:48 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:48 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:48 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:48 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:48 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:48 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

05:44:48 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:48 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3117.825720][ T6175] input: syz1 as /devices/virtual/input/input457
05:44:48 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:48 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)

05:44:48 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:49 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb500)

05:44:49 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:49 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)

05:44:49 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, 0x0, 0x0)

05:44:49 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:49 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x4000000000000000, 0x100)
ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000180))
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=<r3=>0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0xf, 0x4, @tid=r3}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:49 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)

[ 3118.767747][ T6205] input: syz1 as /devices/virtual/input/input458
05:44:49 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:49 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, 0x0, 0x0)

05:44:49 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:49 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:49 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, 0x0, 0x0)

05:44:50 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb501)

05:44:50 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)

05:44:50 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x0, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:50 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

05:44:50 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
getsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(0xffffffffffffff9c, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:50 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x0, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:50 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

[ 3119.787964][ T6240] input: syz1 as /devices/virtual/input/input459
05:44:50 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x0, 0x1, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:50 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:50 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

05:44:50 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(0x0, 0x4, 0x0)

05:44:50 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3120.047896][ T6258] input: syz1 as /devices/virtual/input/input460
05:44:51 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb600)

05:44:51 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:51 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x0, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:51 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:51 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(0x0, 0x4, 0x0)

05:44:51 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1d, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r2 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
fstatfs(r2, &(0x7f0000000080)=""/179)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1})
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x18040, 0x0)

05:44:51 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:51 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:51 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x0, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3120.675890][ T6278] input: syz1 as /devices/virtual/input/input461
[ 3120.682829][ T6268] can: request_module (can-proto-0) failed.
05:44:51 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3120.736324][ T6268] can: request_module (can-proto-0) failed.
05:44:51 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:51 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:52 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb601)

05:44:52 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:52 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(0x0, 0x4, 0x0)

05:44:52 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x0, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:52 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:52 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:52 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x10001, @rand_addr="ccbe4239c2f046324d183b727be140e7", 0x9}, @in6={0xa, 0x4e22, 0x1, @empty, 0x4}, @in={0x2, 0x4e21, @rand_addr=0x7ff}], 0x48)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r2 = dup(r1)
ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x5)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={<r3=>0x0, 0x9, 0x8b94, 0xffffffff, 0x3, 0x7}, &(0x7f0000000180)=0x14)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r3, 0xffffffffffff0000, 0x8, 0x7ff}, &(0x7f0000000200)=0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x82102, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000002c0)={0x2, 0x1, [0x200, 0x7, 0xfffffffffffffffa, 0xa2, 0x8, 0x3d, 0x8]})
ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000280)={0x100000000, 0x0, 0xffffffff, 0x3})

05:44:52 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:52 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3121.600360][ T6307] input: syz1 as /devices/virtual/input/input462
05:44:52 executing program 5:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:52 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:52 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)

[ 3121.885148][ T6328] input: syz1 as /devices/virtual/input/input463
05:44:53 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb700)

05:44:53 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:53 executing program 5:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:53 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)

05:44:53 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/66, 0x42)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:53 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r1 = msgget(0x0, 0xa)
msgctl$IPC_RMID(r1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:44:53 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3122.562886][ T6342] input: syz1 as /devices/virtual/input/input464
05:44:53 executing program 5:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:53 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, 0x0, 0x0)

05:44:53 executing program 5:
r0 = socket(0x0, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:53 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x72, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\'md5sumvboxnet1}(\'nodevselinux\x00')
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)

05:44:53 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, 0x0, 0x0)

[ 3122.905932][ T6365] input: syz1 as /devices/virtual/input/input465
05:44:54 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb701)

05:44:54 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r1 = msgget(0x0, 0xa)
msgctl$IPC_RMID(r1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:44:54 executing program 5:
r0 = socket(0x0, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:54 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, 0x0, 0x0)

05:44:54 executing program 3:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:54 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x7, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000240))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
pselect6(0x40, &(0x7f0000000080)={0x1, 0x2, 0x6, 0x8, 0x0, 0x200, 0xfffffffffffffff7}, &(0x7f00000000c0)={0x101, 0x4, 0x2, 0x9, 0x7, 0x3, 0x8, 0x8}, &(0x7f0000000100)={0x9, 0x31d, 0x100, 0x3556, 0x1, 0x7, 0x9, 0x2}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={0x81}, 0x8})
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:54 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

05:44:54 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:54 executing program 5:
r0 = socket(0x0, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:54 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

05:44:54 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r1 = msgget(0x0, 0xa)
msgctl$IPC_RMID(r1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

05:44:54 executing program 5:
r0 = socket(0x1e, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3123.748392][ T6393] input: syz1 as /devices/virtual/input/input466
05:44:55 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb800)

05:44:55 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

05:44:55 executing program 5:
r0 = socket(0x1e, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:55 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:55 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r1 = msgget(0x0, 0xa)
msgctl$IPC_RMID(r1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:44:55 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_robust_list(&(0x7f0000000200)={&(0x7f00000000c0), 0x0, &(0x7f00000001c0)={&(0x7f0000000180)}}, 0x18)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080))
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100))
timer_create(0x6, &(0x7f0000001280)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240)="425a89da3810765d2c5bce3b39bd0a021f3c92d4be581a", &(0x7f0000000280)="0d554ecb1abaad55bf052461ff55c2bdb6c73a6a5e7d4a777af98911968b227c52c285d02c8b80d4c9561f55dadaa96e0e28a1d53b3170f89748816d1e44e5e7dc0aeed82cf0d562ac54843b034c9f87b81189aa548e9dbdec3b80f85e162001c96b8f7b7cf551a8e81839eee495a18458e610473d2fadd5c2c0f24cca9cc9a3b2e5fa2daf046eac1dd9a3899612458b9afba096f0cced0ebca2f7ec680e25d4fc14911ab05aa9b3c6634bb8319a7f9a998647628589fd0d351a543edd4ee105f7f5b91f5dd8254d08ec0cf40a16cbfa9b12dcb965aa0d6bef6af947fa0181f6623dcfadcc3e5a73afc58f215a78a318ad9b7a61497a00363f27d1e8b3db173303d2dce8decae39fb4d6f08cfb201d8c05d1bdc1d722a69327ab7e02ac054d1d6589145c72f3ce202af234e5b4ddbab81f951a8ee3b9de8e27e7662ca0559751c18d2e97da3ce56eff056988fc8ea4f687cf4e30d1c4c2700ee1fe3cd45dbcea40ae613737fd270d5b82bd298cfb66a546484499555ee92db032276e32d871338c67cdebe73f038c731e66259d18c46913ee3dc1a639db8b8e4c4e7ffdba169ed7e08614c9bc577b1bf85a9c894427f1926bea23386caa53fb3fc652d8cb92e0e84b258a2b780262114ed2c790e3a1cd8dc40ad43e324102e179148a79f4f84c130a5e7c267324b9d2ed43b947511000637f07b6f8f15618fd222f4579d1e1b88295124566320aa70a133536eed6e9ece8cd6d87f9e1e45302ef302769b735e545d5b171a8a9d9ce7a07c6ce1002c21447f19aac7e69ea76bdc0d3fa9269bbf21f0e3c3ca5261367685ff7dc8accb1668cfb4a399afa797742bd5d84f7aa68b14cd69a68eb7e1a82753343fd92961a72b27b19c0b58275a107e59354b4ae78b967cc197124d532b283cf880149dc46805c2d3d081c58389ad5f58c856982ffa17302c66ab17c9c88e0128752cc9d42ceb0608bdba3677a44b79bf1b9b2aa46f15c21e767198915926b342dabe7794feac6f89363b9d94ec523039a9d63598754b287f1b9d8addf5fdc8502aa9cbf809247b3a14e481482e15bc9d9abc76d250d14f499b711a2a41c7c49da61e0f86c7b3ecaf898ce63403fc15f511284cfdce1e2a2ecca601f2fec3f0fe33a3e34b2d0f8228f171cb615c938734ec1cf91f82551169f66ead8dd9a3b4ce22e733682688d9a7086b7a65d538f3948aab8a100b43869e328047d992e4e324959a515376e830a97728a9112412ef435ef03e0b480fcc6d88cb383a2a0943bca48316f67984e825bfd2a03645a99eafc2957e02d080e8bc5174501c637a03e7d88130d798770c133972e74ecaa6ade4e5baf8887837d1198c3d8ca74d6c674c57eb519508d3aa1ba3cc502b7c6c593a3608459addc5193e37ba3bd65c2e38a2937b528c29b43ef4998f3b4396dab2b050065b25e5773cec86a0ba08f9ddab66663f0ef5eb778ff18d124bbf59f5b439bb22d72d854c764542310d1c6518d9326e2f6269d6aa5ec762bfda221116654995d2f3681c5db569fb68a406fe7b67c2d9612e0915ba459cd975740f1dbbc6b925cff55ee05fda0e0d7b9c14d6766c46f3681a18ee982a6f0dd0ae9d19c1d7f5ab210dafa7c44357b3f1b645f8d49f5c246f2c6f4fb72967256f69ef95f6167365db1ec6187a78bbf00243e6accba90c787f50846ba0358c55f12bf7909f5fdc375337bbfc65d0b2a1e1648f761ddaddce1f2cafb39fe97d14d454e6c7cbb5ac87a2d2ed2b7595412df12f7b53b964d94ed3dcbda0a0a8e9c00d3db583ab76f0f92bab4c9369e095afa148f3d197f337dd19da7810eb8fea96cd286e44639cc6f190e36e0bad95f66325b3a4e61d489ef832c7c5c9f4d5ac70efd5e96ea5528308a3b7d7b4ff197a64fd8dc01fe9669ff351cafc8c9797ca5e8cb0c22cbb09027f50338eda6503e10df3afc5c6d2496cc72556cd02ccff638af3bf9000fc6b8d7f4065d82718b6f7151fd3ad511ab01ba99e7c3aaf29fd34c97f6302d980197b691d7eaeb461211fd5c2fd33935ac4396aa933454ef21171276a68191fa06023b8028f6bd7f23e781c9ddacedc83c3e57688a6ae943d0f47db5b0298a2656139ddfc1a64bf800d72385d1e8ee00b786a2fae994c6213ab5513de276514f259376ebce6ad3e895cfa6e2029a12f87934f822a0333c3af8d1a1886f0139a7f8ce8e2d5a242aff2050c28236475dabbbfe4a25325ec31b5b949c2b34120013f478ea73ddda59ae3330d56acb622079747e5fe5b3fe18be3f3b2f9904124aad299b6964e87a073b9742e7b1885baafd8217f418e462f066a56810359b309bb8b1c049fae42dc19790241a4980024b8ea2ed9acd1ba3c8285e019b6ff31e4b3c65455ee9cf698885493e8ad7d86617e3142e2dc9726946909fe0a9549d20aef5a03ea096ff8139529001eecb38f4e8f8bf7639bc21b7df3f2514c58cb2ae490a4797f1684285e72e784c34991910b6d31b18598fa5b6a2bd8f732e1a24ca474f68ede353e64b1b6dacfab5757b4d430be0ec1a6cf41525d6405a2eb9a17ca307f63caa2c9e60f9994522f0b8d166631754d4b080f7565e2996f29e07d0a3c319058378775305161d6f6e73ae23ea4d96618865273eb7e4633dd031a945249cd8e98311199a7d35b7c799364429412bcae0a66d060c6a89bf3a40aeb9386da2e4c9f131024ec51ccac60b9a6b6fe9917042a043767641cd0ef2573217a816eca1b6d377d64b96f3babf0451744bf51de2a5657a7b9998320202ef2655e3fb32c8743c2331025f0f96cfb0bfe351fa8ed28c6db1f502cfae0949c8b12ac43803afb1966b3f1aa4286aaf9666c2c688c0f50b0130d92bed778702c4e32bc947a8b86bd2aa317a91fcb4cf8cd05ded5d00f493fe9776883b3a3d85be715cf60d47490e1b6d4363b19449bec2240c658f44df464da5349688a3ca8ec3d8a0e15b8cb92bf1b37127424f5e00ba776fefbea37a9fa77d620b192650d2c0ab56257539722ad7743492119f7a32e4b23343581c150ce1a5b14dd6b72d896922a54563e823996fd4c82b3669a90ffcc2e40095185de31417646012e0785e6237cf7d6ffd85e92c132150cff0013ec7c2fe79c890602016b82ad5645432f5ee9e558696a3467d0ec963f6a0d3ca44e9a1afb18ef8b4e068550893f3c6b5ffdfe55b13ecb23f92d5679623c3673e2e6312312c0fc7a69c4b6486e3e2cd866c4a055ae112c4263a6aeaff43b372c1c68c9bbc91e12bbde6989b1c9bc0219c9578e16d7e9c53a133339497f8c18ecb3f748aa950df0506bf47d88efa42f1ba5e834ed7bbae9a8b7638b5e8b97eb61b16c35cf1b0982fa8d184805827c900ded12fd49c39370d0c6882fb64ad2787d24b883626a36881195f44446949b8e8e0d4619d54b0e75f1252b70e44124770fd507921f30ca97a3cf849f0cb1e8a60ff9cae049288c4af1ee15c8b6a6976304fe7d2115bbacb065e0e4f5352d834332dd17071072216a079e3312f53a80a1b1ccb2b33c796b26083edea15d5cd80600e0bf2a3d91c5372c2a6116aa3ceb0bd8cc19a4a5444a55df5dfd64bded7f0d15996607bba4718b07e791421b01cd69d8c8bbdbe5150fef4698bb5e6849776b675b0ece27fb8c4a99ffa0aca9e7cab56f14c545c32670c6fdf0ee4289766a6cbd793f09e4ee2548eb69d2b87f33323ada051c44515607ba3a68da612e0d53105b8e0faee253959509a7a7cb6faea247ecf6ba28dc2fa3a2ba00a00f983a0e7640c91bce42d33ebb28f35cc88a71ade01a6a2f96d02e3f4c7a660f7eba5ccb511ffc0281a024f9963a52dabba170e6ee861ba141df4512b3f4ec65fbe97838fc70210922837d0f33e31368383e66478ae661184a4b55f3e2cad5b89e37d2a5f38a485edd1792a7ed6f9f3c1b3400c3729700bced7a46f35b055d7bd75cab6ae291beff869c8c4412b4721f3f89baec7f11021595ef483d778d094323ff7157109927b291344e7f34472785518dc256b40fa5e519c930db17889074f135d91426056d032af701f1a4c02b4767b4b5acde5f93aa621ca5ea9fa2b0202b16ad601a91aeb561f262724a1de1078a6559448f3cb457bb7800764173733169851bb0cc013484d0f0b5e4ddb5ed49f97f1452eb2a4801b65350d39f272d60d5b82ea0b98602af0d028b17d803ddf16dfa52383d128c21d1acb9b7e41342aae04e2e00f4dba908eb0572b5e37a7d1c2c36bbf0b62128b47b9cc9f510d9e757aeccc9e4c5883c7afd8549cbf517e6469cdf5c49b5c881ea6e1dd22a5bace42e38dd2cb6d37c51e0f605f681e5492b16227de40e6fe10ed00532493cba039967545d1d0e1f5c3809260810b24515c02c485e701308dd5beaef1a9f74876315d8d2ae65c85794cec012bb9e780731e9b71f3e10e4fce21f01a87f4167d0f2cd90055523c2c277c5ab56069e30f28733f24b2ce41738d34d8a9a86f241c8e2c93f6fc3dcc4abda3b827fb6f44b0031142fdb514fc12fd0c68a4807718ce2cea43fc36fe98110546941f6a47899cf0909d5e018fa698ace9256f0631a455230de4f1f7b5d7293bb123b1435425eb19bbb1e0a9ee065fdeb85c1d50aa9157ff42a8ca4663532317f3ce6f74edb752e1426bfd2207aa9ff3fb7d35b1bc486366b276500e9aabd59a1db139a83076854be87afdfa9b40b3cef1da3b03b28ba76c1bf170faab6d07e90fa316372417d2fcd6bd195ba9497f4807472547c0c037d1ace6e541b0463ad512c38f281c27cd426af210ce371d86f5851ac4a69aef98d64adc103ba990376bbe1a5ae34c3641c4311fd19c041a2e3d48d5b8aae3415cdfbda57e1bc73f4a05095eebee9062698e0781acd321a80c451bf555bb0920bd3a0a61555b46575d68cd3f1815a09164d1e161be4890cc7d0a40ecb5eac8f184c7f3924fc8d7904fb3974044952e55463334858a478cfdcaf5802dda324ab83d234cd2493264fbc77226066c29aff86cb6d3e140bc8b9106c8980f34a58227aac4b74fc7800d1243001dec4d5e6339c8a145c856f6321d7cfe5d3acc0544aeb8ba76977ee0dbab8d6e5e7f8a922f10c34f3dddb5dbb9b6d01974575de2d77524707251a9e6f9f6a2030fb62079e48012b53616b4db064ba3c2f4b8a46d4ac1e29b854d80e299a4544c13947b230eb8432a88ad04ee7c908f4859be6e7e7717d67a5ba665a26de610f1bedb363ab50792b8e2812b651df8cd1fc3b84f94e5d9d99aeb94ac9230a62259321d210ea38994dcd57c54376996267f58e8c60c2b1ea191aae2b61184bdf3fa64f64d1fcdd719f70617451d094a1e848b41e9b3ba4ae472c62b81c813d7ba6eada8284a77fbbb4f654a875e2f76f8d4dacb86e3417d2556f9d0173e559c974c5cb8797b2f1e173a6116505627a6bf2c258df27e03b85dd68637c00bcd5b592e210e7d202a30c8746c56406de73a8946cb7cd03523861005f70823182eddcec4e8e4cb4a9a295666db7073b09199e99d804568dcc248e6c42c87254e86dce5c1742d61d4e3d00dcb1582481c224d7346264f982dafb6255e1bf8a7af5c84799feb6ff693954914ac3875010eecec2e1739e323f6faedd93f9fc8c3dbac57cee0e253e06bbcb21b438dfc63e4b0b69ca773f6c4bbfd3b5fdfb8e6b8fec7a102e49ab2cb12436ce2d2b07c7ebb2cb2fa3bcf1da0306029b7d69d85330d5d545027e3772f791623d9ebf472ffa371201cd6630364316a3435c6b0baa6ceb68ddec513f3e12775a64f06b7b819a80ad3a7d739"}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:55 executing program 5:
r0 = socket(0x1e, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:55 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x0, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3124.499813][ T6412] input: syz1 as /devices/virtual/input/input467
05:44:55 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x0, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:55 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r1 = msgget(0x0, 0xa)
msgctl$IPC_RMID(r1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)

05:44:55 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:55 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3124.742181][ T6427] input: syz1 as /devices/virtual/input/input468
05:44:56 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb801)

05:44:56 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x1, 0x0, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x0, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:56 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:56 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:56 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3125.463909][ T6439] input: syz1 as /devices/virtual/input/input469
05:44:56 executing program 4:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r1 = msgget(0x0, 0xa)
msgctl$IPC_RMID(r1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:44:56 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:56 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r1 = msgget(0x0, 0xa)
msgctl$IPC_RMID(r1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)

05:44:56 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:56 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3125.635642][ T6453] input: syz1 as /devices/virtual/input/input470
05:44:56 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:56 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3125.780068][ T6458] input: syz1 as /devices/virtual/input/input471
05:44:57 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb900)

05:44:57 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:57 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:57 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000140)="09bab987fde25bfb048eef3ecd595c07770ca30f5653a3ca27501ac29886c02b2d9e4ea0910ddefd890503af3cee19d2744065e78cbcd5358e56e95ba30930422a19e73e79161eeba13ca4b81706575637f3e29958c9eb51062a7314e0330c1552efbec580a1052f4993794ef4841107bbff110b4305f11065dc0c36aed9ff0d451637f9e96eca9d65fecd0ccd86316f1987abec2213cee87206fbe597561dde6bb9bcb2bdddd99323c305fe838546b8c395b7b85fce14b81a6082887cd31be7fd52e636b4ff761a4c4281011f4d", 0xce)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
getpgid(0xffffffffffffffff)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={<r3=>0x0}, &(0x7f00000000c0)=0xc)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={<r4=>0x0, 0x195, 0x5, 0x8000}, &(0x7f0000000280)=0x10)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000002c0)={r4, 0x3e, "34f186d2c293edf85f2195f77192ed95ee2b6f8435351e505dd1cf977ba12aa60d128ff0fa5ba4fc3a696423d929014bfc4b29fed41bc989999f80e0346c"}, &(0x7f0000000340)=0x46)
tkill(r3, 0x1b)

05:44:57 executing program 4:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r1 = msgget(0x0, 0xa)
msgctl$IPC_RMID(r1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:44:57 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r1 = msgget(0x0, 0xa)
msgctl$IPC_RMID(r1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)

05:44:57 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x0, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:57 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:57 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYRES32=<r2=>0x0, @ANYBLOB="1000e900003381611fb0b5797ab90c58c8a3291257dfebe8756729f650603a9d296eb79298d05d487156202b3dc32ddf5dc7d0330144a8b125bc804bb33f9a6801e7b7b1ecf85b9cca46f92695735efa908d4c599eefcda781eef319bb14c28f066c51944d00032fe18f82d96e28b89c"], &(0x7f00000000c0)=0x18)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r2, 0x401}, 0x8)

05:44:57 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x0, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:57 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:57 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x0, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:58 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:58 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x0, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:58 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xb901)

05:44:58 executing program 4:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r1 = msgget(0x0, 0xa)
msgctl$IPC_RMID(r1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:44:58 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r1 = msgget(0x0, 0xa)
msgctl$IPC_RMID(r1, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:44:58 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:58 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)
r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x4, 0x400040)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000900000008000000000000001f000000000000005909000000000000030000b01abc00000000000400000000000000fdffffff00000000ffff00000000000007000000000000000100000000000000090000000000000000800000000000000700000000000000332600000000000002000000000000003f000000000000002cf4ffff000000004dea000000000000090000000000000020000000000000000000000000"])

05:44:58 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x0, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:58 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x0, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:58 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:58 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:58 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:58 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:58 executing program 3:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:59 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xba00)

05:44:59 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:59 executing program 3:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:59 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r1 = msgget(0x0, 0xa)
msgctl$IPC_RMID(r1, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:44:59 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000280)={0x0, 0x70, 0x7, 0x4, 0x6a93, 0x1, 0x0, 0x7, 0x91100, 0x0, 0x1, 0x8000, 0x6, 0x6, 0x1b, 0xffffffff, 0x0, 0x8, 0x4, 0x3, 0x243, 0x1, 0xb16, 0xff, 0x9, 0x0, 0x3, 0x1, 0x81, 0x80000001, 0x33a, 0x401, 0x7, 0x4, 0x0, 0x67ca98f6, 0x7a6, 0x2, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0x7, 0x1, 0x9, 0xcd, 0x6, 0x9})
r2 = socket(0x1e, 0x805, 0x0)
listen(r2, 0xffffffff00000001)
socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)
r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7, 0x200)
r4 = fcntl$getown(r2, 0x9)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000100)={{0x4, 0x5, 0x2, 0x2, '\x00', 0x9}, 0x3, 0x230, 0x1, r4, 0x1, 0xffffffffffff7fff, 'syz0\x00', &(0x7f00000000c0)=['\\\\\x00'], 0x3, [], [0xe097, 0xffffffffffffffff, 0x213b, 0xfff]})

05:44:59 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:59 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3128.536608][ T6561] input: syz1 as /devices/virtual/input/input478
05:44:59 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:44:59 executing program 3:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:59 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:44:59 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net\x00')
ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x101)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xdfe9, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:44:59 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, 0x0, 0x0)

[ 3128.754787][ T6577] input: syz1 as /devices/virtual/input/input479
05:45:00 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xba01)

05:45:00 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:00 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, 0x0, 0x0)

05:45:00 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:00 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
r1 = msgget(0x0, 0xa)
msgctl$IPC_RMID(r1, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:00 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, 0x0, 0x0)

05:45:00 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3129.442356][ T6594] input: syz1 as /devices/virtual/input/input480
05:45:00 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

05:45:00 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:00 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

05:45:00 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x4, 0x6, 0x2, 0x9}, 0xfffffffffffffd2a)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x20000, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7)
r2 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:45:00 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3129.662176][ T6609] input: syz1 as /devices/virtual/input/input481
05:45:01 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xbb00)

05:45:01 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:01 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

05:45:01 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:01 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @broadcast}, 0x4, 0x0, 0x0, 0x1}}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x3, 0x400000)
ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000300)={0x1, &(0x7f00000001c0)=""/5, &(0x7f00000002c0)=[{0x42d, 0x8d, 0x1, &(0x7f0000000200)=""/141}]})
clock_getres(0x2, &(0x7f0000000080))
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x80, 0x0)
write$P9_RXATTRCREATE(r3, &(0x7f0000000100)={0x7, 0x21, 0x2}, 0x7)

05:45:01 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
msgget(0x0, 0xa)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:01 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x0, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3130.440937][ T6631] input: syz1 as /devices/virtual/input/input483
05:45:01 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x4, 0x20000000000)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x100)
write$P9_RSYMLINK(r1, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x1, 0x3, 0x5}}, 0x14)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
getsockname$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10)
r2 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
prctl$PR_SET_TSC(0x1a, 0x1)
timer_create(0x0, &(0x7f0000000000)={0x0, 0xf, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:45:01 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:01 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:01 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:01 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x0, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

[ 3130.777313][ T6655] input: syz1 as /devices/virtual/input/input485
05:45:02 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xbb01)

05:45:02 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:02 executing program 5:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7f, 0x0, 0x2, 0x5}, 0x10)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x0, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

05:45:02 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:02 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:02 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="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", 0x1000, 0xfffffffffffffff9)
keyctl$set_timeout(0xf, r0, 0x3)
r1 = socket(0x1e, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000011c0)={<r2=>0x0, 0x7, 0x20}, &(0x7f0000001200)=0xc)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001240)={r2, 0xbab, 0x30}, &(0x7f0000001280)=0xc)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r3 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000}, 0x1c)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
rt_sigpending(&(0x7f00000000c0), 0x8)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
seccomp(0x0, 0x1, &(0x7f0000001300)={0x1, &(0x7f00000012c0)=[{0x5, 0x7ff, 0x6, 0xffff}]})
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001340)={{{@in, @in6=@ipv4={[], [], @loopback}}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000001440)=0xe8)

05:45:02 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

05:45:02 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:02 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3131.642876][ T6685] 
[ 3131.645248][ T6685] ======================================================
[ 3131.652254][ T6685] WARNING: possible circular locking dependency detected
[ 3131.659266][ T6685] 5.0.0+ #16 Not tainted
[ 3131.663489][ T6685] ------------------------------------------------------
[ 3131.670495][ T6685] syz-executor.5/6685 is trying to acquire lock:
[ 3131.676809][ T6685] 00000000a5dc2b80 (&pipe->mutex/1){+.+.}, at: fifo_open+0x159/0xb00
[ 3131.685058][ T6685] 
[ 3131.685058][ T6685] but task is already holding lock:
[ 3131.692416][ T6685] 000000004bb50ba1 (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x23f0
[ 3131.702486][ T6685] 
[ 3131.702486][ T6685] which lock already depends on the new lock.
[ 3131.702486][ T6685] 
[ 3131.712877][ T6685] 
[ 3131.712877][ T6685] the existing dependency chain (in reverse order) is:
[ 3131.721878][ T6685] 
[ 3131.721878][ T6685] -> #2 (&sig->cred_guard_mutex){+.+.}:
[ 3131.729604][ T6685]        lock_acquire+0x16f/0x3f0
[ 3131.734667][ T6685]        __mutex_lock+0xf7/0x1310
[ 3131.739692][ T6685]        mutex_lock_killable_nested+0x16/0x20
[ 3131.745817][ T6685]        lock_trace+0x4a/0xe0
[ 3131.750496][ T6685]        proc_pid_personality+0x1c/0xd0
[ 3131.756031][ T6685]        proc_single_show+0xf6/0x170
[ 3131.761311][ T6685]        seq_read+0x4db/0x1130
[ 3131.766071][ T6685]        do_iter_read+0x4a9/0x660
[ 3131.771085][ T6685]        vfs_readv+0xf0/0x160
[ 3131.775753][ T6685]        default_file_splice_read+0x475/0x890
[ 3131.781825][ T6685]        do_splice_to+0x12a/0x190
[ 3131.786859][ T6685]        splice_direct_to_actor+0x2d2/0x970
[ 3131.792758][ T6685]        do_splice_direct+0x1da/0x2a0
[ 3131.798124][ T6685]        do_sendfile+0x597/0xd00
[ 3131.803053][ T6685]        __x64_sys_sendfile64+0x1dd/0x220
[ 3131.808765][ T6685]        do_syscall_64+0x103/0x610
[ 3131.813873][ T6685]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3131.820275][ T6685] 
[ 3131.820275][ T6685] -> #1 (&p->lock){+.+.}:
[ 3131.826779][ T6685]        lock_acquire+0x16f/0x3f0
[ 3131.831799][ T6685]        __mutex_lock+0xf7/0x1310
[ 3131.833807][ T6687] uinput: write device info first
[ 3131.836821][ T6685]        mutex_lock_nested+0x16/0x20
[ 3131.836833][ T6685]        seq_read+0x71/0x1130
[ 3131.836844][ T6685]        proc_reg_read+0x1fe/0x2c0
[ 3131.836865][ T6685]        do_iter_read+0x4a9/0x660
[ 3131.861882][ T6685]        vfs_readv+0xf0/0x160
[ 3131.866554][ T6685]        default_file_splice_read+0x475/0x890
[ 3131.872614][ T6685]        do_splice_to+0x12a/0x190
[ 3131.877633][ T6685]        do_splice+0x10a0/0x1490
[ 3131.882563][ T6685]        __x64_sys_splice+0x2c6/0x330
[ 3131.887938][ T6685]        do_syscall_64+0x103/0x610
[ 3131.893054][ T6685]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3131.899459][ T6685] 
[ 3131.899459][ T6685] -> #0 (&pipe->mutex/1){+.+.}:
[ 3131.906493][ T6685]        __lock_acquire+0x239c/0x3fb0
[ 3131.911862][ T6685]        lock_acquire+0x16f/0x3f0
[ 3131.916884][ T6685]        __mutex_lock+0xf7/0x1310
[ 3131.921904][ T6685]        mutex_lock_nested+0x16/0x20
[ 3131.927188][ T6685]        fifo_open+0x159/0xb00
[ 3131.931964][ T6685]        do_dentry_open+0x488/0x1160
[ 3131.937244][ T6685]        vfs_open+0xa0/0xd0
[ 3131.941740][ T6685]        path_openat+0x10e9/0x46e0
[ 3131.946837][ T6685]        do_filp_open+0x1a1/0x280
[ 3131.951854][ T6685]        do_open_execat+0x137/0x690
[ 3131.957045][ T6685]        __do_execve_file.isra.0+0x178d/0x23f0
[ 3131.963193][ T6685]        __x64_sys_execve+0x8f/0xc0
[ 3131.968404][ T6685]        do_syscall_64+0x103/0x610
[ 3131.973517][ T6685]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3131.979919][ T6685] 
[ 3131.979919][ T6685] other info that might help us debug this:
[ 3131.979919][ T6685] 
[ 3131.990141][ T6685] Chain exists of:
[ 3131.990141][ T6685]   &pipe->mutex/1 --> &p->lock --> &sig->cred_guard_mutex
[ 3131.990141][ T6685] 
[ 3132.003078][ T6685]  Possible unsafe locking scenario:
[ 3132.003078][ T6685] 
[ 3132.010517][ T6685]        CPU0                    CPU1
[ 3132.015878][ T6685]        ----                    ----
[ 3132.021233][ T6685]   lock(&sig->cred_guard_mutex);
[ 3132.026246][ T6685]                                lock(&p->lock);
[ 3132.032559][ T6685]                                lock(&sig->cred_guard_mutex);
[ 3132.036516][ T6686] kobject: 'input488' (0000000084d904cd): kobject_cleanup, parent           (null)
[ 3132.040087][ T6685]   lock(&pipe->mutex/1);
[ 3132.040098][ T6685] 
[ 3132.040098][ T6685]  *** DEADLOCK ***
[ 3132.040098][ T6685] 
[ 3132.040105][ T6685] 1 lock held by syz-executor.5/6685:
[ 3132.040109][ T6685]  #0: 000000004bb50ba1 (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x23f0
[ 3132.040148][ T6685] 
[ 3132.040148][ T6685] stack backtrace:
[ 3132.060625][ T6686] kobject: 'input488' (0000000084d904cd): calling ktype release
05:45:03 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:03 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3132.061854][ T6685] CPU: 1 PID: 6685 Comm: syz-executor.5 Not tainted 5.0.0+ #16
[ 3132.061863][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3132.061867][ T6685] Call Trace:
[ 3132.061887][ T6685]  dump_stack+0x172/0x1f0
[ 3132.061909][ T6685]  print_circular_bug.isra.0.cold+0x1cc/0x28f
[ 3132.071776][ T6686] kobject: 'input488': free name
[ 3132.077820][ T6685]  check_prev_add.constprop.0+0xf11/0x23c0
[ 3132.077835][ T6685]  ? depot_save_stack+0x1de/0x460
[ 3132.077848][ T6685]  ? check_usage+0x570/0x570
[ 3132.077867][ T6685]  ? mark_held_locks+0xa4/0xf0
[ 3132.145247][ T3874] kobject: 'loop3' (00000000eb778738): kobject_uevent_env
[ 3132.147554][ T6685]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[ 3132.147570][ T6685]  ? graph_lock+0x7b/0x200
[ 3132.147582][ T6685]  ? __lockdep_reset_lock+0x450/0x450
[ 3132.147602][ T6685]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 3132.176465][ T6685]  __lock_acquire+0x239c/0x3fb0
[ 3132.181317][ T6685]  ? save_stack+0xa9/0xd0
[ 3132.185651][ T6685]  ? mark_held_locks+0xf0/0xf0
[ 3132.190416][ T6685]  lock_acquire+0x16f/0x3f0
[ 3132.194972][ T6685]  ? fifo_open+0x159/0xb00
[ 3132.195578][ T3874] kobject: 'loop3' (00000000eb778738): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 3132.199387][ T6685]  ? fifo_open+0x159/0xb00
[ 3132.199404][ T6685]  __mutex_lock+0xf7/0x1310
[ 3132.199416][ T6685]  ? fifo_open+0x159/0xb00
[ 3132.199428][ T6685]  ? fifo_open+0x159/0xb00
[ 3132.199441][ T6685]  ? fifo_open+0x2b5/0xb00
[ 3132.199461][ T6685]  ? mutex_trylock+0x1e0/0x1e0
[ 3132.217781][ T6700] uinput: write device info first
[ 3132.218485][ T6685]  ? fifo_open+0x2b5/0xb00
05:45:03 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

[ 3132.218503][ T6685]  ? kasan_check_write+0x14/0x20
[ 3132.218516][ T6685]  ? lock_downgrade+0x880/0x880
[ 3132.218539][ T6685]  mutex_lock_nested+0x16/0x20
[ 3132.260376][ T6685]  ? mutex_lock_nested+0x16/0x20
[ 3132.265314][ T6685]  fifo_open+0x159/0xb00
[ 3132.269561][ T6685]  do_dentry_open+0x488/0x1160
[ 3132.274327][ T6685]  ? pipe_release+0x280/0x280
[ 3132.279002][ T6685]  ? chown_common+0x5c0/0x5c0
[ 3132.283679][ T6685]  ? inode_permission+0xb4/0x570
[ 3132.288618][ T6685]  vfs_open+0xa0/0xd0
[ 3132.292019][ T6698] kobject: 'input490' (0000000086432e88): kobject_cleanup, parent           (null)
[ 3132.292601][ T6685]  path_openat+0x10e9/0x46e0
[ 3132.306441][ T6685]  ? path_lookupat.isra.0+0x8d0/0x8d0
[ 3132.311810][ T6685]  ? __kmalloc+0x15c/0x740
[ 3132.313189][ T6698] kobject: 'input490' (0000000086432e88): calling ktype release
[ 3132.316226][ T6685]  ? security_prepare_creds+0x123/0x190
[ 3132.316241][ T6685]  ? prepare_creds+0x2f5/0x3f0
[ 3132.316262][ T6685]  ? prepare_exec_creds+0x12/0xf0
[ 3132.339148][ T6685]  ? __do_execve_file.isra.0+0x393/0x23f0
[ 3132.344874][ T6685]  ? do_syscall_64+0x103/0x610
[ 3132.349635][ T6685]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3132.350960][ T6698] kobject: 'input490': free name
[ 3132.355696][ T6685]  ? __lock_acquire+0x548/0x3fb0
[ 3132.355711][ T6685]  ? prepare_exec_creds+0x12/0xf0
[ 3132.355724][ T6685]  do_filp_open+0x1a1/0x280
[ 3132.355741][ T6685]  ? may_open_dev+0x100/0x100
[ 3132.379726][ T6685]  ? __lock_acquire+0x548/0x3fb0
[ 3132.384660][ T6685]  ? lockdep_init_map+0x1be/0x6d0
[ 3132.389687][ T6685]  do_open_execat+0x137/0x690
[ 3132.394362][ T6685]  ? unregister_binfmt+0x170/0x170
[ 3132.399473][ T6685]  ? lock_downgrade+0x880/0x880
[ 3132.404320][ T6685]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3132.410559][ T6685]  ? kasan_check_read+0x11/0x20
[ 3132.415411][ T6685]  ? do_raw_spin_unlock+0x57/0x270
[ 3132.420522][ T6685]  __do_execve_file.isra.0+0x178d/0x23f0
[ 3132.426152][ T6685]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 3132.431867][ T6685]  ? __check_object_size+0x3d/0x42f
[ 3132.437066][ T6685]  ? copy_strings_kernel+0x110/0x110
[ 3132.442355][ T6685]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3132.442539][ T3874] kobject: 'loop3' (00000000eb778738): kobject_uevent_env
[ 3132.448589][ T6685]  ? getname_flags+0x277/0x5b0
[ 3132.448604][ T6685]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3132.448617][ T6685]  __x64_sys_execve+0x8f/0xc0
[ 3132.448632][ T6685]  do_syscall_64+0x103/0x610
[ 3132.448645][ T6685]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3132.448656][ T6685] RIP: 0033:0x457f29
[ 3132.448670][ T6685] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3132.448677][ T6685] RSP: 002b:00007ffb8ecb1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[ 3132.448697][ T6685] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29
[ 3132.472854][ T6690] kobject: 'input489' (00000000dbc9e3e5): kobject_cleanup, parent           (null)
[ 3132.476165][ T6685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000
05:45:03 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xbc00)

05:45:03 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:03 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

[ 3132.486893][ T3874] kobject: 'loop3' (00000000eb778738): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 3132.505506][ T6685] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 3132.505513][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffb8ecb26d4
[ 3132.505519][ T6685] R13: 00000000004be513 R14: 00000000004cee00 R15: 00000000ffffffff
[ 3132.506357][ T6690] kobject: 'input489' (00000000dbc9e3e5): calling ktype release
[ 3132.577887][ T6716] uinput: write device info first
05:45:03 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3132.595977][ T6690] kobject: 'input489': free name
[ 3132.621028][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3132.637386][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3132.648282][ T6712] kobject: 'input491' (00000000adfbcf82): kobject_cleanup, parent           (null)
05:45:03 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

[ 3132.664785][ T6712] kobject: 'input491' (00000000adfbcf82): calling ktype release
[ 3132.686650][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3132.693929][ T6712] kobject: 'input491': free name
[ 3132.699516][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
05:45:03 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x40002, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0xfffffffffffffffb, 0x9, 0x6, 0x2, 0xc24000000000000, 0x10000, 0x9}, 0x1c)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x160, 0x0, 0x0, 0x0, 0xffffffffffffff16}, 0x44)
r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)="d53448178e29b517f1e1dc40c8a7fe89e61781f9133abd34b9143a16ed6fb616a5883fae9ba98b834a2da46e56a4ec9edc83b6e49659f459d19e6e861adb6f909fbc062e4ba044b8b3380f6424d556aeebf2a825fe1f8660b030e20fd498475c05acd8518c07b3bf02d6accb5c61ac9e988c8b850dc9429f5db3222419e1238eda207d342be84331c07c3d1d64a28f9a2c1d4f45c9bbbca854a9208a856ebe5786b3abc48f21bcb98acc5cdfb0cd0389855872d317920a0d8eac3002aa66c888bc516db542ae40d9e2061182ec0e624e5e416b8942cf82df02cd", 0xda, 0xfffffffffffffffd)
keyctl$invalidate(0x15, r2)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:45:03 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3132.723625][ T6723] kobject: 'input492' (0000000062d6a3ba): kobject_cleanup, parent           (null)
[ 3132.743186][ T3874] kobject: 'loop2' (000000006ad3f1cf): kobject_uevent_env
[ 3132.750449][ T3874] kobject: 'loop2' (000000006ad3f1cf): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 3132.763843][ T6723] kobject: 'input492' (0000000062d6a3ba): calling ktype release
05:45:03 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:03 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

[ 3132.784361][ T6723] kobject: 'input492': free name
[ 3132.794567][ T3874] kobject: 'loop3' (00000000eb778738): kobject_uevent_env
[ 3132.810600][ T6739] kobject: 'input493' (0000000093c1e50f): kobject_add_internal: parent: 'input', set: 'devices'
[ 3132.819404][ T3874] kobject: 'loop3' (00000000eb778738): fill_kobj_path: path = '/devices/virtual/block/loop3'
05:45:03 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

05:45:03 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001800)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0xfffffffffffffffe, r1})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000240))
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x1, 0xfffffffffffffffa, 0x4, 0x40, 0x89, 0x800})
r4 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r3, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3132.840143][ T6739] kobject: 'input493' (0000000093c1e50f): kobject_uevent_env
[ 3132.850867][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3132.871344][ T6739] kobject: 'input493' (0000000093c1e50f): fill_kobj_path: path = '/devices/virtual/input/input493'
[ 3132.877014][ T6748] uinput: write device info first
[ 3132.882954][ T6739] kobject: 'input493' (0000000093c1e50f): fill_kobj_path: path = '/devices/virtual/input/input493'
[ 3132.888664][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3132.907338][ T6739] input: syz1 as /devices/virtual/input/input493
[ 3132.916391][ T6739] kobject: 'event4' (00000000d8c56865): kobject_add_internal: parent: 'input493', set: 'devices'
[ 3132.926407][ T6741] kobject: 'input494' (00000000b91b25e4): kobject_cleanup, parent           (null)
05:45:03 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

[ 3132.932984][ T6739] kobject: 'event4' (00000000d8c56865): kobject_uevent_env
[ 3132.947911][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3132.956015][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3132.956300][ T6739] kobject: 'event4' (00000000d8c56865): fill_kobj_path: path = '/devices/virtual/input/input493/event4'
[ 3132.967774][ T6751] kobject: 'vet' (00000000fe3f33b1): kobject_add_internal: parent: 'net', set: 'devices'
[ 3132.990215][ T6741] kobject: 'input494' (00000000b91b25e4): calling ktype release
[ 3132.997985][ T6741] kobject: 'input494': free name
[ 3133.004732][ T3874] kobject: 'loop2' (000000006ad3f1cf): kobject_uevent_env
[ 3133.010112][ T6737] kobject: 'event4' (00000000d8c56865): kobject_uevent_env
[ 3133.013569][ T3874] kobject: 'loop2' (000000006ad3f1cf): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 3133.019409][ T6737] kobject: 'event4' (00000000d8c56865): fill_kobj_path: path = '/devices/virtual/input/input493/event4'
[ 3133.032684][ T6751] kobject: 'vet' (00000000fe3f33b1): kobject_uevent_env
[ 3133.046769][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3133.047617][ T6751] kobject: 'vet' (00000000fe3f33b1): fill_kobj_path: path = '/devices/virtual/net/vet'
[ 3133.054902][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3133.077936][ T6751] kobject: 'queues' (0000000096c0646a): kobject_add_internal: parent: 'vet', set: '<NULL>'
[ 3133.082319][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3133.093478][ T6751] kobject: 'queues' (0000000096c0646a): kobject_uevent_env
[ 3133.095482][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3133.102884][ T6751] kobject: 'queues' (0000000096c0646a): kobject_uevent_env: filter function caused the event to drop!
[ 3133.112768][ T6737] kobject: 'input493' (0000000093c1e50f): kobject_uevent_env
[ 3133.125758][ T6751] kobject: 'rx-0' (0000000001560bf6): kobject_add_internal: parent: 'queues', set: 'queues'
[ 3133.134591][ T6737] kobject: 'input493' (0000000093c1e50f): fill_kobj_path: path = '/devices/virtual/input/input493'
[ 3133.144674][ T6751] kobject: 'rx-0' (0000000001560bf6): kobject_uevent_env
[ 3133.161544][ T6751] kobject: 'rx-0' (0000000001560bf6): fill_kobj_path: path = '/devices/virtual/net/vet/queues/rx-0'
[ 3133.172515][ T6751] kobject: 'tx-0' (0000000050001861): kobject_add_internal: parent: 'queues', set: 'queues'
[ 3133.185126][ T6751] kobject: 'tx-0' (0000000050001861): kobject_uevent_env
[ 3133.192694][ T6751] kobject: 'tx-0' (0000000050001861): fill_kobj_path: path = '/devices/virtual/net/vet/queues/tx-0'
[ 3133.206126][ T6737] kobject: '(null)' (0000000046c4f57a): kobject_cleanup, parent 00000000d8c56865
[ 3133.216387][ T6751] kobject: 'batman_adv' (00000000056b63a8): kobject_add_internal: parent: 'vet', set: '<NULL>'
[ 3133.229253][ T6737] kobject: '(null)' (0000000046c4f57a): calling ktype release
[ 3133.236712][ T6737] kobject: 'event4' (00000000d8c56865): kobject_cleanup, parent           (null)
[ 3133.248189][ T6737] kobject: 'event4' (00000000d8c56865): calling ktype release
[ 3133.261209][ T6737] kobject: 'input493' (0000000093c1e50f): kobject_cleanup, parent           (null)
[ 3133.270621][ T6737] kobject: 'input493' (0000000093c1e50f): calling ktype release
[ 3133.278306][ T6737] kobject: 'input493': free name
[ 3133.285737][ T6737] kobject: 'event4': free name
[ 3133.307779][ T3874] kobject: 'loop3' (00000000eb778738): kobject_uevent_env
[ 3133.315011][ T3874] kobject: 'loop3' (00000000eb778738): fill_kobj_path: path = '/devices/virtual/block/loop3'
05:45:04 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xbc01)

05:45:04 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

05:45:04 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:04 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:04 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3133.512441][ T6770] kobject: 'input495' (00000000d0f80550): kobject_add_internal: parent: 'input', set: 'devices'
[ 3133.523759][ T6769] uinput: write device info first
[ 3133.539434][ T6770] kobject: 'input495' (00000000d0f80550): kobject_uevent_env
05:45:04 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

[ 3133.565008][ T6770] kobject: 'input495' (00000000d0f80550): fill_kobj_path: path = '/devices/virtual/input/input495'
[ 3133.587023][ T6767] kobject: 'input496' (000000007af4d0ad): kobject_cleanup, parent           (null)
05:45:04 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

[ 3133.608856][ T6770] kobject: 'input495' (00000000d0f80550): fill_kobj_path: path = '/devices/virtual/input/input495'
[ 3133.609100][ T6767] kobject: 'input496' (000000007af4d0ad): calling ktype release
[ 3133.640937][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3133.648147][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3133.657076][ T6767] kobject: 'input496': free name
05:45:04 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3133.658678][ T6770] input: syz1 as /devices/virtual/input/input495
[ 3133.675189][ T6770] kobject: 'event4' (00000000243b12f9): kobject_add_internal: parent: 'input495', set: 'devices'
[ 3133.692603][ T6770] kobject: 'event4' (00000000243b12f9): kobject_uevent_env
[ 3133.702046][ T6761] kobject: 'batman_adv' (00000000056b63a8): kobject_uevent_env
05:45:04 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

[ 3133.716210][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3133.717288][ T6761] kobject: 'batman_adv' (00000000056b63a8): kobject_uevent_env: filter function caused the event to drop!
[ 3133.723551][ T6770] kobject: 'event4' (00000000243b12f9): fill_kobj_path: path = '/devices/virtual/input/input495/event4'
[ 3133.727645][ T6768] kobject: 'event4' (00000000243b12f9): kobject_uevent_env
[ 3133.758697][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3133.762442][ T6796] uinput: write device info first
[ 3133.769366][ T6761] kobject: 'batman_adv' (00000000056b63a8): kobject_cleanup, parent           (null)
[ 3133.777623][ T6768] kobject: 'event4' (00000000243b12f9): fill_kobj_path: path = '/devices/virtual/input/input495/event4'
[ 3133.797763][ T6761] kobject: 'batman_adv' (00000000056b63a8): calling ktype release
[ 3133.806215][ T6761] kobject: (00000000056b63a8): dynamic_kobj_release
[ 3133.816642][ T6761] kobject: 'batman_adv': free name
[ 3133.822231][ T6796] kobject: '(null)' (00000000a50b55ee): kobject_cleanup, parent 00000000243b12f9
[ 3133.836714][ T6761] kobject: 'rx-0' (0000000001560bf6): kobject_cleanup, parent 0000000096c0646a
[ 3133.838748][ T6796] kobject: '(null)' (00000000a50b55ee): calling ktype release
[ 3133.846049][ T6768] kobject: 'input495' (00000000d0f80550): kobject_uevent_env
05:45:04 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

[ 3133.869659][ T6761] kobject: 'rx-0' (0000000001560bf6): auto cleanup 'remove' event
[ 3133.883673][ T6796] kobject: 'event4' (00000000243b12f9): kobject_cleanup, parent           (null)
[ 3133.886302][ T6768] kobject: 'input495' (00000000d0f80550): fill_kobj_path: path = '/devices/virtual/input/input495'
[ 3133.909655][ T6796] kobject: 'event4' (00000000243b12f9): calling ktype release
[ 3133.911722][ T6761] kobject: 'rx-0' (0000000001560bf6): kobject_uevent_env
[ 3133.928155][ T6796] kobject: 'event4': free name
[ 3133.930576][ T6768] kobject: 'input495' (00000000d0f80550): kobject_cleanup, parent           (null)
[ 3133.946217][ T6761] kobject: 'rx-0' (0000000001560bf6): fill_kobj_path: path = '/devices/virtual/net/vet/queues/rx-0'
[ 3133.961659][ T6794] kobject: 'input497' (00000000a0205717): kobject_cleanup, parent           (null)
[ 3133.971177][ T6768] kobject: 'input495' (00000000d0f80550): calling ktype release
[ 3133.978741][ T6794] kobject: 'input497' (00000000a0205717): calling ktype release
[ 3133.983864][ T6761] kobject: 'rx-0' (0000000001560bf6): auto cleanup kobject_del
[ 3133.994328][ T6768] kobject: 'input495': free name
[ 3133.998649][ T6794] kobject: 'input497': free name
[ 3134.007963][ T6761] kobject: 'rx-0' (0000000001560bf6): calling ktype release
[ 3134.024451][ T6761] kobject: 'rx-0': free name
[ 3134.031400][ T3874] kobject: 'loop3' (00000000eb778738): kobject_uevent_env
[ 3134.033763][ T6761] kobject: 'tx-0' (0000000050001861): kobject_cleanup, parent 0000000096c0646a
[ 3134.044981][ T3874] kobject: 'loop3' (00000000eb778738): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 3134.057938][ T6761] kobject: 'tx-0' (0000000050001861): auto cleanup 'remove' event
[ 3134.058551][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3134.068873][ T6761] kobject: 'tx-0' (0000000050001861): kobject_uevent_env
[ 3134.073268][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3134.080160][ T6761] kobject: 'tx-0' (0000000050001861): fill_kobj_path: path = '/devices/virtual/net/vet/queues/tx-0'
[ 3134.104395][ T6761] kobject: 'tx-0' (0000000050001861): auto cleanup kobject_del
[ 3134.113436][ T6761] kobject: 'tx-0' (0000000050001861): calling ktype release
[ 3134.123291][ T6761] kobject: 'tx-0': free name
[ 3134.127961][ T6761] kobject: 'queues' (0000000096c0646a): kobject_cleanup, parent           (null)
[ 3134.137289][ T6761] kobject: 'queues' (0000000096c0646a): calling ktype release
[ 3134.147379][ T6761] kobject: 'queues' (0000000096c0646a): kset_release
[ 3134.154238][ T6761] kobject: 'queues': free name
[ 3134.161913][ T6761] kobject: 'vet' (00000000fe3f33b1): kobject_uevent_env
[ 3134.169048][ T6761] kobject: 'vet' (00000000fe3f33b1): fill_kobj_path: path = '/devices/virtual/net/vet'
[ 3134.181925][ T6763] kobject: 'vet' (00000000b96d8045): kobject_add_internal: parent: 'net', set: 'devices'
[ 3134.192634][ T6763] kobject: 'vet' (00000000b96d8045): kobject_uevent_env
[ 3134.202173][ T6763] kobject: 'vet' (00000000b96d8045): fill_kobj_path: path = '/devices/virtual/net/vet'
[ 3134.212087][ T6763] kobject: 'queues' (00000000730e20d3): kobject_add_internal: parent: 'vet', set: '<NULL>'
[ 3134.224858][ T6763] kobject: 'queues' (00000000730e20d3): kobject_uevent_env
[ 3134.232245][ T6763] kobject: 'queues' (00000000730e20d3): kobject_uevent_env: filter function caused the event to drop!
[ 3134.245776][ T6763] kobject: 'rx-0' (0000000032af5eec): kobject_add_internal: parent: 'queues', set: 'queues'
[ 3134.256059][ T6763] kobject: 'rx-0' (0000000032af5eec): kobject_uevent_env
[ 3134.265706][ T6763] kobject: 'rx-0' (0000000032af5eec): fill_kobj_path: path = '/devices/virtual/net/vet/queues/rx-0'
[ 3134.276712][ T6763] kobject: 'tx-0' (00000000149ac13b): kobject_add_internal: parent: 'queues', set: 'queues'
[ 3134.289521][ T6763] kobject: 'tx-0' (00000000149ac13b): kobject_uevent_env
[ 3134.296650][ T6763] kobject: 'tx-0' (00000000149ac13b): fill_kobj_path: path = '/devices/virtual/net/vet/queues/tx-0'
[ 3134.310032][ T6763] kobject: 'batman_adv' (00000000834d15b5): kobject_add_internal: parent: 'vet', set: '<NULL>'
[ 3134.322504][ T6761] kobject: 'vet' (00000000fe3f33b1): kobject_cleanup, parent           (null)
[ 3134.333577][ T6763] kobject: 'batman_adv' (00000000834d15b5): kobject_uevent_env
[ 3134.342916][ T6761] kobject: 'vet' (00000000fe3f33b1): calling ktype release
[ 3134.351079][ T6763] kobject: 'batman_adv' (00000000834d15b5): kobject_uevent_env: filter function caused the event to drop!
[ 3134.364224][ T6761] kobject: 'vet': free name
[ 3134.371555][ T6763] kobject: 'batman_adv' (00000000834d15b5): kobject_cleanup, parent           (null)
[ 3134.382802][ T6763] kobject: 'batman_adv' (00000000834d15b5): calling ktype release
[ 3134.391552][ T6763] kobject: (00000000834d15b5): dynamic_kobj_release
[ 3134.398222][ T6763] kobject: 'batman_adv': free name
[ 3134.419317][ T6763] kobject: 'rx-0' (0000000032af5eec): kobject_cleanup, parent 00000000730e20d3
[ 3134.428384][ T6763] kobject: 'rx-0' (0000000032af5eec): auto cleanup 'remove' event
[ 3134.438907][ T6763] kobject: 'rx-0' (0000000032af5eec): kobject_uevent_env
[ 3134.446031][ T6763] kobject: 'rx-0' (0000000032af5eec): fill_kobj_path: path = '/devices/virtual/net/vet/queues/rx-0'
[ 3134.466022][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3134.468081][ T6763] kobject: 'rx-0' (0000000032af5eec): auto cleanup kobject_del
[ 3134.473483][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3134.483169][ T6763] kobject: 'rx-0' (0000000032af5eec): calling ktype release
[ 3134.498418][ T6763] kobject: 'rx-0': free name
[ 3134.505581][ T6763] kobject: 'tx-0' (00000000149ac13b): kobject_cleanup, parent 00000000730e20d3
[ 3134.514887][ T6763] kobject: 'tx-0' (00000000149ac13b): auto cleanup 'remove' event
[ 3134.525215][ T6763] kobject: 'tx-0' (00000000149ac13b): kobject_uevent_env
[ 3134.532375][ T6763] kobject: 'tx-0' (00000000149ac13b): fill_kobj_path: path = '/devices/virtual/net/vet/queues/tx-0'
[ 3134.545762][ T6763] kobject: 'tx-0' (00000000149ac13b): auto cleanup kobject_del
[ 3134.553488][ T6763] kobject: 'tx-0' (00000000149ac13b): calling ktype release
[ 3134.563208][ T6763] kobject: 'tx-0': free name
[ 3134.567825][ T6763] kobject: 'queues' (00000000730e20d3): kobject_cleanup, parent           (null)
[ 3134.577219][ T6763] kobject: 'queues' (00000000730e20d3): calling ktype release
[ 3134.587138][ T6763] kobject: 'queues' (00000000730e20d3): kset_release
[ 3134.594124][ T6763] kobject: 'queues': free name
[ 3134.601719][ T6763] kobject: 'vet' (00000000b96d8045): kobject_uevent_env
[ 3134.609838][ T6763] kobject: 'vet' (00000000b96d8045): fill_kobj_path: path = '/devices/virtual/net/vet'
05:45:05 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x84008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x40000)
request_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='\x00', r1)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r3 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x10010, r0, 0x14)
tkill(0x0, 0x401104000000016)

05:45:05 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:05 executing program 0:
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:05 executing program 4:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r0, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:05 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xbd00)

05:45:05 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

[ 3134.661230][ T6763] kobject: 'vet' (00000000b96d8045): kobject_cleanup, parent           (null)
[ 3134.670244][ T6763] kobject: 'vet' (00000000b96d8045): calling ktype release
[ 3134.677511][ T6763] kobject: 'vet': free name
[ 3134.732887][ T3874] kobject: 'loop2' (000000006ad3f1cf): kobject_uevent_env
[ 3134.736876][ T6816] kobject: 'input498' (000000005e1ce29f): kobject_add_internal: parent: 'input', set: 'devices'
[ 3134.750558][ T3874] kobject: 'loop2' (000000006ad3f1cf): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 3134.763760][ T6816] kobject: 'input498' (000000005e1ce29f): kobject_uevent_env
[ 3134.771510][ T6816] kobject: 'input498' (000000005e1ce29f): fill_kobj_path: path = '/devices/virtual/input/input498'
05:45:05 executing program 4:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r0, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3134.784052][ T6816] kobject: 'input498' (000000005e1ce29f): fill_kobj_path: path = '/devices/virtual/input/input498'
[ 3134.796208][ T6816] input: syz1 as /devices/virtual/input/input498
[ 3134.815321][ T6816] kobject: 'event4' (000000006dd79911): kobject_add_internal: parent: 'input498', set: 'devices'
[ 3134.817707][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3134.842751][ T6816] kobject: 'event4' (000000006dd79911): kobject_uevent_env
[ 3134.855955][ T6816] kobject: 'event4' (000000006dd79911): fill_kobj_path: path = '/devices/virtual/input/input498/event4'
[ 3134.866748][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3134.880931][ T6806] kobject: 'event4' (000000006dd79911): kobject_uevent_env
05:45:05 executing program 4:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r0, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:05 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

[ 3134.899858][ T6806] kobject: 'event4' (000000006dd79911): fill_kobj_path: path = '/devices/virtual/input/input498/event4'
[ 3134.917019][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3134.925770][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3134.989062][ T6806] kobject: 'input498' (000000005e1ce29f): kobject_uevent_env
[ 3135.000427][ T6806] kobject: 'input498' (000000005e1ce29f): fill_kobj_path: path = '/devices/virtual/input/input498'
05:45:06 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3135.039645][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3135.049682][ T6806] kobject: '(null)' (0000000038729df5): kobject_cleanup, parent 000000006dd79911
[ 3135.051416][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3135.063566][ T6806] kobject: '(null)' (0000000038729df5): calling ktype release
05:45:06 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

[ 3135.084754][ T6806] kobject: 'event4' (000000006dd79911): kobject_cleanup, parent           (null)
05:45:06 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3135.104280][ T6806] kobject: 'event4' (000000006dd79911): calling ktype release
[ 3135.122139][ T6806] kobject: 'input498' (000000005e1ce29f): kobject_cleanup, parent           (null)
[ 3135.132368][ T6806] kobject: 'input498' (000000005e1ce29f): calling ktype release
[ 3135.142954][ T6806] kobject: 'input498': free name
[ 3135.148112][ T6806] kobject: 'event4': free name
[ 3135.192249][ T3874] kobject: 'loop3' (00000000eb778738): kobject_uevent_env
[ 3135.203948][ T3874] kobject: 'loop3' (00000000eb778738): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 3135.236612][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3135.244041][ T6841] kobject: 'input499' (0000000039728daa): kobject_cleanup, parent           (null)
[ 3135.250064][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3135.253759][ T6841] kobject: 'input499' (0000000039728daa): calling ktype release
[ 3135.271753][ T6841] kobject: 'input499': free name
[ 3135.292234][ T3874] kobject: 'loop3' (00000000eb778738): kobject_uevent_env
[ 3135.299536][ T3874] kobject: 'loop3' (00000000eb778738): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 3135.529561][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3135.536719][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
05:45:06 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffff9c, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:45:06 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:06 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:06 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:06 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

05:45:06 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xbd01)

[ 3135.661150][ T3874] kobject: 'loop2' (000000006ad3f1cf): kobject_uevent_env
[ 3135.674315][ T3874] kobject: 'loop2' (000000006ad3f1cf): fill_kobj_path: path = '/devices/virtual/block/loop2'
05:45:06 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:06 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

[ 3135.704375][ T6854] kobject: 'input500' (00000000db906e61): kobject_cleanup, parent           (null)
[ 3135.720721][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3135.735688][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
05:45:06 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x24, 0x5, {"10cf8cd2bc827ddc4c1616"}}, {0x0, "490c09d786d682b94be93b0b36c15b"}}, &(0x7f00000000c0)=""/100, 0x35, 0x64, 0x1}, 0x20)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:45:06 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3135.751873][ T6854] kobject: 'input500' (00000000db906e61): calling ktype release
[ 3135.760614][ T6854] kobject: 'input500': free name
[ 3135.767601][ T3874] kobject: 'loop2' (000000006ad3f1cf): kobject_uevent_env
05:45:06 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3135.797260][ T3874] kobject: 'loop2' (000000006ad3f1cf): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 3135.811109][ T3874] kobject: 'loop3' (00000000eb778738): kobject_uevent_env
[ 3135.818432][ T3874] kobject: 'loop3' (00000000eb778738): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 3135.836115][ T6879] kobject: 'input501' (00000000a6845f1f): kobject_cleanup, parent           (null)
05:45:06 executing program 0:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:06 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3135.837657][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3135.846308][ T6879] kobject: 'input501' (00000000a6845f1f): calling ktype release
[ 3135.861285][ T6889] uinput: write device info first
[ 3135.863913][ T6879] kobject: 'input501': free name
[ 3135.870472][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3135.913985][ T3874] kobject: 'loop3' (00000000eb778738): kobject_uevent_env
[ 3135.926048][ T6887] kobject: 'input502' (000000006b69234f): kobject_cleanup, parent           (null)
[ 3135.930047][ T3874] kobject: 'loop3' (00000000eb778738): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 3135.937576][ T6895] kobject: 'input503' (00000000ed4fb70c): kobject_add_internal: parent: 'input', set: 'devices'
[ 3135.956762][ T6887] kobject: 'input502' (000000006b69234f): calling ktype release
05:45:06 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3135.964791][ T6887] kobject: 'input502': free name
[ 3135.970648][ T6895] kobject: 'input503' (00000000ed4fb70c): kobject_uevent_env
[ 3135.987413][ T6895] kobject: 'input503' (00000000ed4fb70c): fill_kobj_path: path = '/devices/virtual/input/input503'
[ 3136.006635][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
05:45:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

[ 3136.010972][ T6895] kobject: 'input503' (00000000ed4fb70c): fill_kobj_path: path = '/devices/virtual/input/input503'
[ 3136.021027][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3136.026157][ T6895] input: syz1 as /devices/virtual/input/input503
[ 3136.041859][ T6895] kobject: 'event4' (000000001e3d5979): kobject_add_internal: parent: 'input503', set: 'devices'
[ 3136.053366][ T6900] uinput: write device info first
[ 3136.059479][ T6899] kobject: 'input504' (0000000045ce3b99): kobject_cleanup, parent           (null)
[ 3136.068874][ T6895] kobject: 'event4' (000000001e3d5979): kobject_uevent_env
[ 3136.076479][ T6895] kobject: 'event4' (000000001e3d5979): fill_kobj_path: path = '/devices/virtual/input/input503/event4'
[ 3136.088048][ T6899] kobject: 'input504' (0000000045ce3b99): calling ktype release
[ 3136.096449][ T6899] kobject: 'input504': free name
[ 3136.104469][ T6893] kobject: 'event4' (000000001e3d5979): kobject_uevent_env
[ 3136.112049][ T6893] kobject: 'event4' (000000001e3d5979): fill_kobj_path: path = '/devices/virtual/input/input503/event4'
[ 3136.149076][ T6899] kobject: '(null)' (0000000013e7faef): kobject_cleanup, parent 000000001e3d5979
05:45:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

[ 3136.160858][ T6899] kobject: '(null)' (0000000013e7faef): calling ktype release
[ 3136.170112][ T6893] kobject: 'input503' (00000000ed4fb70c): kobject_uevent_env
[ 3136.181375][ T6899] kobject: 'event4' (000000001e3d5979): kobject_cleanup, parent           (null)
[ 3136.185548][ T6893] kobject: 'input503' (00000000ed4fb70c): fill_kobj_path: path = '/devices/virtual/input/input503'
[ 3136.200792][ T6899] kobject: 'event4' (000000001e3d5979): calling ktype release
[ 3136.228642][ T6899] kobject: 'input503' (00000000ed4fb70c): kobject_cleanup, parent           (null)
[ 3136.237929][ T6899] kobject: 'input503' (00000000ed4fb70c): calling ktype release
[ 3136.247268][ T3874] kobject: 'loop3' (00000000eb778738): kobject_uevent_env
[ 3136.248386][ T6899] kobject: 'input503': free name
[ 3136.254496][ T3874] kobject: 'loop3' (00000000eb778738): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 3136.270336][ T6899] kobject: 'event4': free name
[ 3136.303385][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3136.311000][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
05:45:07 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

[ 3136.461785][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3136.469254][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
05:45:07 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xbe00)

05:45:07 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:07 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3136.564553][ T6916] kobject: 'input505' (00000000c5e6369c): kobject_add_internal: parent: 'input', set: 'devices'
[ 3136.575322][ T6915] uinput: write device info first
[ 3136.585834][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3136.593499][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3136.597913][ T6916] kobject: 'input505' (00000000c5e6369c): kobject_uevent_env
05:45:07 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/61, 0x3d)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:45:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:07 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

[ 3136.635630][ T6916] kobject: 'input505' (00000000c5e6369c): fill_kobj_path: path = '/devices/virtual/input/input505'
[ 3136.650974][ T6916] kobject: 'input505' (00000000c5e6369c): fill_kobj_path: path = '/devices/virtual/input/input505'
[ 3136.665118][ T6914] kobject: 'input506' (00000000f2e01e19): kobject_cleanup, parent           (null)
[ 3136.665573][ T3874] kobject: 'loop2' (000000006ad3f1cf): kobject_uevent_env
[ 3136.686752][ T6914] kobject: 'input506' (00000000f2e01e19): calling ktype release
[ 3136.689243][ T3874] kobject: 'loop2' (000000006ad3f1cf): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 3136.705100][ T6916] input: syz1 as /devices/virtual/input/input505
[ 3136.720004][ T6914] kobject: 'input506': free name
05:45:07 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:07 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

[ 3136.732378][ T6916] kobject: 'event4' (00000000363ea51b): kobject_add_internal: parent: 'input505', set: 'devices'
[ 3136.764120][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3136.771784][ T6916] kobject: 'event4' (00000000363ea51b): kobject_uevent_env
[ 3136.792312][ T6938] uinput: write device info first
[ 3136.798236][ T6936] kobject: 'input507' (00000000df7f769f): kobject_cleanup, parent           (null)
[ 3136.799692][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3136.809964][ T6916] kobject: 'event4' (00000000363ea51b): fill_kobj_path: path = '/devices/virtual/input/input505/event4'
[ 3136.822732][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
05:45:07 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

[ 3136.831438][ T6936] kobject: 'input507' (00000000df7f769f): calling ktype release
[ 3136.836586][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3136.844094][ T6936] kobject: 'input507': free name
[ 3136.856720][ T6913] kobject: 'event4' (00000000363ea51b): kobject_uevent_env
[ 3136.869601][ T6913] kobject: 'event4' (00000000363ea51b): fill_kobj_path: path = '/devices/virtual/input/input505/event4'
05:45:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:07 executing program 4:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r0, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3136.890749][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3136.898693][ T6936] kobject: '(null)' (00000000b1178141): kobject_cleanup, parent 00000000363ea51b
[ 3136.900112][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3136.914153][ T6936] kobject: '(null)' (00000000b1178141): calling ktype release
[ 3136.929722][ T6913] kobject: 'event4' (00000000363ea51b): kobject_cleanup, parent           (null)
[ 3136.942591][ T6913] kobject: 'event4' (00000000363ea51b): calling ktype release
[ 3136.946544][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3136.950594][ T6913] kobject: 'event4': free name
[ 3136.962487][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3136.965102][ T6913] kobject: 'input505' (00000000c5e6369c): kobject_uevent_env
[ 3136.984063][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3136.995457][ T6913] kobject: 'input505' (00000000c5e6369c): fill_kobj_path: path = '/devices/virtual/input/input505'
[ 3137.001869][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3137.013239][ T6913] kobject: 'input505' (00000000c5e6369c): kobject_cleanup, parent           (null)
[ 3137.025856][ T6913] kobject: 'input505' (00000000c5e6369c): calling ktype release
[ 3137.034058][ T6913] kobject: 'input505': free name
[ 3137.037432][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3137.050629][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3137.061363][ T3874] kobject: 'loop3' (00000000eb778738): kobject_uevent_env
[ 3137.068485][ T3874] kobject: 'loop3' (00000000eb778738): fill_kobj_path: path = '/devices/virtual/block/loop3'
05:45:08 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xbe01)

05:45:08 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

05:45:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:08 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r1, 0x902, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2993}]}, 0x78}, 0x1, 0x0, 0x0, 0x4801}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='timers\x00')
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

05:45:08 executing program 4:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r0, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:08 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:08 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

[ 3137.553147][ T3874] kobject: 'loop2' (000000006ad3f1cf): kobject_uevent_env
[ 3137.560775][ T6969] kobject: 'input508' (0000000029c1a475): kobject_add_internal: parent: 'input', set: 'devices'
[ 3137.571815][ T3874] kobject: 'loop2' (000000006ad3f1cf): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 3137.583594][ T6969] kobject: 'input508' (0000000029c1a475): kobject_uevent_env
[ 3137.591601][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
05:45:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:08 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

[ 3137.606330][ T6969] kobject: 'input508' (0000000029c1a475): fill_kobj_path: path = '/devices/virtual/input/input508'
[ 3137.618320][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3137.633963][ T6969] kobject: 'input508' (0000000029c1a475): fill_kobj_path: path = '/devices/virtual/input/input508'
05:45:08 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000015)

[ 3137.659716][ T6969] input: syz1 as /devices/virtual/input/input508
[ 3137.666568][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3137.673907][ T6969] kobject: 'event4' (00000000a5cdad12): kobject_add_internal: parent: 'input508', set: 'devices'
[ 3137.688823][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3137.701352][ T3874] kobject: 'loop2' (000000006ad3f1cf): kobject_uevent_env
05:45:08 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

[ 3137.708976][ T3874] kobject: 'loop2' (000000006ad3f1cf): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 3137.719287][ T6969] kobject: 'event4' (00000000a5cdad12): kobject_uevent_env
[ 3137.726637][ T6969] kobject: 'event4' (00000000a5cdad12): fill_kobj_path: path = '/devices/virtual/input/input508/event4'
[ 3137.738416][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3137.745809][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
05:45:08 executing program 5:
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

[ 3137.759012][ T6968] kobject: 'event4' (00000000a5cdad12): kobject_uevent_env
[ 3137.771438][ T6968] kobject: 'event4' (00000000a5cdad12): fill_kobj_path: path = '/devices/virtual/input/input508/event4'
[ 3137.786773][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3137.794067][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3137.798868][ T6968] kobject: '(null)' (000000002e94b7f5): kobject_cleanup, parent 00000000a5cdad12
[ 3137.805085][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3137.828370][ T6968] kobject: '(null)' (000000002e94b7f5): calling ktype release
[ 3137.829338][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3137.889501][ T6968] kobject: 'event4' (00000000a5cdad12): kobject_cleanup, parent           (null)
[ 3137.902613][ T6968] kobject: 'event4' (00000000a5cdad12): calling ktype release
[ 3137.910653][ T6968] kobject: 'event4': free name
[ 3137.916180][ T6968] kobject: 'input508' (0000000029c1a475): kobject_uevent_env
[ 3137.926543][ T6968] kobject: 'input508' (0000000029c1a475): fill_kobj_path: path = '/devices/virtual/input/input508'
[ 3137.938082][ T6968] kobject: 'input508' (0000000029c1a475): kobject_cleanup, parent           (null)
[ 3137.950352][ T6968] kobject: 'input508' (0000000029c1a475): calling ktype release
[ 3137.958365][ T6968] kobject: 'input508': free name
[ 3137.987171][ T3874] kobject: 'loop3' (00000000eb778738): kobject_uevent_env
[ 3137.994337][ T3874] kobject: 'loop3' (00000000eb778738): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 3138.004948][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3138.012093][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
05:45:09 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xbf00)

05:45:09 executing program 4:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(r0, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:09 executing program 5:
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

05:45:09 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3138.431874][ T7006] kobject: 'input509' (000000006430f81c): kobject_add_internal: parent: 'input', set: 'devices'
[ 3138.443366][ T7006] kobject: 'input509' (000000006430f81c): kobject_uevent_env
[ 3138.452236][ T7006] kobject: 'input509' (000000006430f81c): fill_kobj_path: path = '/devices/virtual/input/input509'
[ 3138.463157][ T7006] kobject: 'input509' (000000006430f81c): fill_kobj_path: path = '/devices/virtual/input/input509'
[ 3138.474326][ T7006] input: syz1 as /devices/virtual/input/input509
05:45:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

[ 3138.497345][ T7006] kobject: 'event4' (00000000bfe6e1d4): kobject_add_internal: parent: 'input509', set: 'devices'
[ 3138.508706][ T7006] kobject: 'event4' (00000000bfe6e1d4): kobject_uevent_env
05:45:09 executing program 5:
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

05:45:09 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1)
tkill(0x0, 0x401104000000016)

[ 3138.546572][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3138.553927][ T7006] kobject: 'event4' (00000000bfe6e1d4): fill_kobj_path: path = '/devices/virtual/input/input509/event4'
[ 3138.571304][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3138.584169][ T7005] kobject: 'event4' (00000000bfe6e1d4): kobject_uevent_env
05:45:09 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3138.588483][ T3874] kobject: 'loop2' (000000006ad3f1cf): kobject_uevent_env
[ 3138.602338][ T7005] kobject: 'event4' (00000000bfe6e1d4): fill_kobj_path: path = '/devices/virtual/input/input509/event4'
[ 3138.604031][ T3874] kobject: 'loop2' (000000006ad3f1cf): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 3138.636900][ T7005] kobject: '(null)' (0000000006ab6ae1): kobject_cleanup, parent 00000000bfe6e1d4
05:45:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

[ 3138.648455][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3138.655825][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3138.680954][ T7029] uinput: write device info first
[ 3138.682206][ T7005] kobject: '(null)' (0000000006ab6ae1): calling ktype release
05:45:09 executing program 5:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

[ 3138.691485][ T7028] kobject: 'input510' (00000000287dc439): kobject_cleanup, parent           (null)
[ 3138.707933][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3138.715581][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3138.729000][ T7028] kobject: 'input510' (00000000287dc439): calling ktype release
[ 3138.749023][ T7005] kobject: 'event4' (00000000bfe6e1d4): kobject_cleanup, parent           (null)
[ 3138.750868][ T7028] kobject: 'input510': free name
[ 3138.758899][ T7005] kobject: 'event4' (00000000bfe6e1d4): calling ktype release
[ 3138.781649][ T7005] kobject: 'event4': free name
05:45:09 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3138.793671][ T7005] kobject: 'input509' (000000006430f81c): kobject_uevent_env
[ 3138.805841][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3138.815679][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3138.830993][ T7005] kobject: 'input509' (000000006430f81c): fill_kobj_path: path = '/devices/virtual/input/input509'
[ 3138.847453][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3138.851029][ T7040] uinput: write device info first
[ 3138.858018][ T7005] kobject: 'input509' (000000006430f81c): kobject_cleanup, parent           (null)
[ 3138.861836][ T7039] kobject: 'input511' (00000000d466146c): kobject_cleanup, parent           (null)
[ 3138.869064][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3138.889129][ T7039] kobject: 'input511' (00000000d466146c): calling ktype release
[ 3138.890741][ T7005] kobject: 'input509' (000000006430f81c): calling ktype release
[ 3138.896930][ T7039] kobject: 'input511': free name
[ 3138.926939][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3138.934136][ T7005] kobject: 'input509': free name
[ 3138.938668][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3139.078659][ T3874] kobject: 'loop3' (00000000eb778738): kobject_uevent_env
[ 3139.085815][ T3874] kobject: 'loop3' (00000000eb778738): fill_kobj_path: path = '/devices/virtual/block/loop3'
05:45:10 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xbf01)

05:45:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:10 executing program 5:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

05:45:10 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:10 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3139.366818][ T7048] kobject: 'input512' (0000000050103445): kobject_add_internal: parent: 'input', set: 'devices'
[ 3139.377545][ T7047] uinput: write device info first
[ 3139.396762][ T7046] kobject: 'input513' (00000000ca1b1153): kobject_cleanup, parent           (null)
05:45:10 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x8080, 0x0)
ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000280)=""/220)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={<r3=>0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30)
setpriority(0x1, r3, 0x7fff)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)

[ 3139.416100][ T7048] kobject: 'input512' (0000000050103445): kobject_uevent_env
[ 3139.423824][ T7046] kobject: 'input513' (00000000ca1b1153): calling ktype release
[ 3139.432517][ T7048] kobject: 'input512' (0000000050103445): fill_kobj_path: path = '/devices/virtual/input/input512'
[ 3139.450034][ T7046] kobject: 'input513': free name
[ 3139.458004][ T3874] kobject: 'loop2' (000000006ad3f1cf): kobject_uevent_env
05:45:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:10 executing program 5:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

[ 3139.468467][ T3874] kobject: 'loop2' (000000006ad3f1cf): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 3139.476727][ T7048] kobject: 'input512' (0000000050103445): fill_kobj_path: path = '/devices/virtual/input/input512'
05:45:10 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3139.521238][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3139.528634][ T7048] input: syz1 as /devices/virtual/input/input512
[ 3139.532714][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3139.547845][ T7048] kobject: 'event4' (00000000632bc704): kobject_add_internal: parent: 'input512', set: 'devices'
[ 3139.555830][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3139.566386][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3139.566571][ T7066] uinput: write device info first
[ 3139.586478][ T7048] kobject: 'event4' (00000000632bc704): kobject_uevent_env
[ 3139.599763][ T7048] kobject: 'event4' (00000000632bc704): fill_kobj_path: path = '/devices/virtual/input/input512/event4'
[ 3139.613083][ T7065] kobject: 'input514' (0000000049a6da34): kobject_cleanup, parent           (null)
[ 3139.630524][ T7043] kobject: 'event4' (00000000632bc704): kobject_uevent_env
[ 3139.647161][ T7065] kobject: 'input514' (0000000049a6da34): calling ktype release
05:45:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

[ 3139.665196][ T7043] kobject: 'event4' (00000000632bc704): fill_kobj_path: path = '/devices/virtual/input/input512/event4'
[ 3139.671289][ T7065] kobject: 'input514': free name
[ 3139.698490][ T7043] kobject: '(null)' (00000000aaf20e6d): kobject_cleanup, parent 00000000632bc704
05:45:10 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(0x0, 0x10001040, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

05:45:10 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3139.729703][ T7043] kobject: '(null)' (00000000aaf20e6d): calling ktype release
[ 3139.751451][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3139.765611][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3139.769580][ T7043] kobject: 'event4' (00000000632bc704): kobject_cleanup, parent           (null)
[ 3139.778545][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3139.794747][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3139.805910][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3139.815577][ T7043] kobject: 'event4' (00000000632bc704): calling ktype release
[ 3139.816640][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3139.823765][ T7078] uinput: write device info first
[ 3139.855856][ T7043] kobject: 'event4': free name
[ 3139.872237][ T7043] kobject: 'input512' (0000000050103445): kobject_uevent_env
[ 3139.880097][ T7076] kobject: 'input515' (00000000a3c52bec): kobject_cleanup, parent           (null)
[ 3139.889519][ T7043] kobject: 'input512' (0000000050103445): fill_kobj_path: path = '/devices/virtual/input/input512'
[ 3139.900350][ T7076] kobject: 'input515' (00000000a3c52bec): calling ktype release
[ 3139.918718][ T7076] kobject: 'input515': free name
[ 3139.923916][ T7043] kobject: 'input512' (0000000050103445): kobject_cleanup, parent           (null)
[ 3139.934056][ T7043] kobject: 'input512' (0000000050103445): calling ktype release
[ 3139.942489][ T7043] kobject: 'input512': free name
[ 3139.995360][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3140.002526][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3140.032882][ T3874] kobject: 'loop3' (00000000eb778738): kobject_uevent_env
[ 3140.040129][ T3874] kobject: 'loop3' (00000000eb778738): fill_kobj_path: path = '/devices/virtual/block/loop3'
05:45:11 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xc000)

05:45:11 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(0x0, 0x10001040, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

05:45:11 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:11 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:11 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSFF(r1, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:11 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)
fcntl$setsig(r0, 0xa, 0x9)

05:45:11 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(0x0, 0x10001040, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

[ 3140.349075][ T3874] kobject: 'loop2' (000000006ad3f1cf): kobject_uevent_env
[ 3140.350901][ T7088] kobject: 'input516' (0000000026f371e8): kobject_add_internal: parent: 'input', set: 'devices'
[ 3140.356247][ T3874] kobject: 'loop2' (000000006ad3f1cf): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 3140.359193][ T7085] uinput: write device info first
[ 3140.385855][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
05:45:11 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

[ 3140.393056][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3140.412875][ T7083] kobject: 'input517' (0000000041578dbf): kobject_cleanup, parent           (null)
[ 3140.438648][ T7083] kobject: 'input517' (0000000041578dbf): calling ktype release
05:45:11 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

[ 3140.445688][ T7088] kobject: 'input516' (0000000026f371e8): kobject_uevent_env
[ 3140.458701][ T7083] kobject: 'input517': free name
[ 3140.466292][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3140.473802][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3140.477220][ T7088] kobject: 'input516' (0000000026f371e8): fill_kobj_path: path = '/devices/virtual/input/input516'
05:45:11 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

05:45:11 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3140.516742][   T26] audit: type=1804 audit(1552283111.476:56): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir424070954/syzkaller.QdLlyt/1793/file0" dev="sda1" ino=18129 res=1
[ 3140.528192][ T7088] kobject: 'input516' (0000000026f371e8): fill_kobj_path: path = '/devices/virtual/input/input516'
[ 3140.540851][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
05:45:11 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

[ 3140.567652][ T7088] input: syz1 as /devices/virtual/input/input516
[ 3140.570318][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3140.595446][ T7088] kobject: 'event4' (000000004676a6dd): kobject_add_internal: parent: 'input516', set: 'devices'
[ 3140.602083][   T26] audit: type=1804 audit(1552283111.526:57): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir424070954/syzkaller.QdLlyt/1794/file0" dev="sda1" ino=17100 res=1
[ 3140.608172][ T7115] uinput: write device info first
[ 3140.638338][ T7088] kobject: 'event4' (000000004676a6dd): kobject_uevent_env
[ 3140.646393][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3140.658734][ T7088] kobject: 'event4' (000000004676a6dd): fill_kobj_path: path = '/devices/virtual/input/input516/event4'
[ 3140.659744][   T26] audit: type=1804 audit(1552283111.626:58): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir424070954/syzkaller.QdLlyt/1795/file0" dev="sda1" ino=18161 res=1
[ 3140.680037][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3140.696404][ T7113] kobject: 'input518' (000000000d4ed340): kobject_cleanup, parent           (null)
[ 3140.713603][ T7113] kobject: 'input518' (000000000d4ed340): calling ktype release
[ 3140.716049][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3140.726371][ T7113] kobject: 'input518': free name
[ 3140.728623][ T7087] kobject: 'event4' (000000004676a6dd): kobject_uevent_env
[ 3140.734301][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3140.743808][ T7087] kobject: 'event4' (000000004676a6dd): fill_kobj_path: path = '/devices/virtual/input/input516/event4'
[ 3140.752741][ T3874] kobject: 'loop5' (0000000037679ee9): kobject_uevent_env
[ 3140.770693][ T3874] kobject: 'loop5' (0000000037679ee9): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3140.788933][ T7113] kobject: '(null)' (00000000d237e85a): kobject_cleanup, parent 000000004676a6dd
[ 3140.798048][ T7113] kobject: '(null)' (00000000d237e85a): calling ktype release
[ 3140.811055][ T7087] kobject: 'event4' (000000004676a6dd): kobject_cleanup, parent           (null)
[ 3140.822323][ T3874] kobject: 'loop4' (00000000d3b6b74c): kobject_uevent_env
[ 3140.823607][ T7087] kobject: 'event4' (000000004676a6dd): calling ktype release
[ 3140.829602][ T3874] kobject: 'loop4' (00000000d3b6b74c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3140.839598][ T7087] kobject: 'event4': free name
[ 3140.855918][ T7087] kobject: 'input516' (0000000026f371e8): kobject_uevent_env
[ 3140.863629][ T7087] kobject: 'input516' (0000000026f371e8): fill_kobj_path: path = '/devices/virtual/input/input516'
[ 3140.877424][ T7087] kobject: 'input516' (0000000026f371e8): kobject_cleanup, parent           (null)
[ 3140.887244][ T7087] kobject: 'input516' (0000000026f371e8): calling ktype release
[ 3140.897630][ T7087] kobject: 'input516': free name
[ 3140.994757][ T3874] kobject: 'loop3' (00000000eb778738): kobject_uevent_env
[ 3141.001959][ T3874] kobject: 'loop3' (00000000eb778738): fill_kobj_path: path = '/devices/virtual/block/loop3'
05:45:12 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xc001)

05:45:12 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
execve(0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

05:45:12 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000180)=0x6f7bbbe1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x1}, 0x1c)

05:45:12 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:12 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00', 0x3})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x80044584, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

05:45:12 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = msgget$private(0x0, 0x10)
msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000180)=""/4096)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300110004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x401104000000016)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x100)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000000c0)={0x4a8b1fdb, <r4=>0x0, 0x0, 0x9})
ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000100)={0x75, r4})

[ 3141.230028][ T3874] kobject: 'loop2' (000000006ad3f1cf): kobject_uevent_env
[ 3141.237190][ T3874] kobject: 'loop2' (000000006ad3f1cf): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 3141.283494][ T7128] kobject: 'input519' (0000000004279c76): kobject_add_internal: parent: 'input', set: 'devices'
[ 3141.291931][ T7130] uinput: write device info first
[ 3141.317408][ T7128] kobject: 'input519' (0000000004279c76): kobject_uevent_env
[ 3141.325446][ T7128] kobject: 'input519' (0000000004279c76): fill_kobj_path: path = '/devices/virtual/input/input519'
[ 3141.340191][ T7128] kobject: 'input519' (0000000004279c76): fill_kobj_path: path = '/devices/virtual/input/input519'
[ 3141.352843][ T7128] input: syz1 as /devices/virtual/input/input519
[ 3141.366917][ T7126] kobject: 'input520' (000000000f658690): kobject_cleanup, parent           (null)
05:45:12 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40044581, &(0x7f0000001d80)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 3141.382480][ T7128] kobject: 'event4' (00000000c0b3c4ed): kobject_add_internal: parent: 'input519', set: 'devices'
[ 3141.393134][ T7126] kobject: 'input520' (000000000f658690): calling ktype release
[ 3141.393153][ T7126] kobject: 'input520': free name
05:45:12 executing program 5:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0)
execve(0x0, 0x0, 0x0)
openat(0xfffff